Palo Alto Networks
HMS Networks PEAK-System PCAN Windows drivers
At a glance
Medium rather than High: exposure is scored at a default because we cannot see your systems or suppliers.
Briefing
- View CSAF Summary Successful exploitation of these vulnerabilities could crash the Windows kernel.
Questions to ask IT
- Do we run Palo Alto Networks, and which versions?
- If it is still not patched, what mitigation is in place, and what is holding the fix up?
Next steps
- Confirm whether this affects systems or suppliers in your estate
Vulnerability facts
Full CVE detail CVE-2026-101103- 6.8 · MediumExploitable only with local access and a low-privilege account, and no one has to click or open anything. High impact on availability.CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Not listed
- ~0.1% estimated chance of attack in 30 days
- Not linked from the CVE record
These facts are for CVE-2026-101103. This event covers 5 more CVEs, each with its own record.
No technical write-up beyond these facts and the summary below yet.
Next steps
- Review the advisory against your asset inventory and patch cadence
Summary
- HMS Networks PEAK-System PCAN Windows drivers are reported to have vulnerabilities that could crash the Windows kernel.
- The vulnerabilities affect specific versions of the HMS Networks PEAK-System PCAN Windows drivers.
Read the original reportCISA ICS Advisories(opens in a new tab)
Products and services involved
- Palo Alto Networks94% match confidence · CVE-2026-101103
Pulse
Last checked 29 Oct · Recheck overdue since 2 Nov 2026, 16:12 UK time · 1 quiet check collapsed
- Story20 Oct 2026, 17:07 UK time · 20 Oct
Linked reporting from CISA ICS Advisories (official authority).
Read source (CISA ICS Advisories) - Story20 Oct 2026, 18:04 UK time · 20 Oct
Linked reporting from CISA Cybersecurity Advisories (official authority).
Read source (CISA Cybersecurity Advisories)
2 entries so far. The timeline chart appears once this story has more history.
Sources
- CISA ICS AdvisoriesOfficial
HMS Networks PEAK-System PCAN Windows drivers
- CISA Cybersecurity AdvisoriesOfficial
HMS Networks PEAK-System PCAN Windows drivers
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
HMS Networks PEAK-System PCAN Windows drivers
- ProbableSummary fact75% confidence
View CSAF Summary Successful exploitation of these vulnerabilities could crash the Windows kernel.
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-101103
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-103672
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-105960
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-109576
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-110322
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-94188