CVE-2026-94188

mediumpriority · track · 0US

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

— EPSS

CVSS 5.5 · medium

Is it mine?

2 products

Who says so?

1 sources

cisa_csaf_ot

No description recorded.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

No vendor fix yet; a mitigation is available.

MitigationPCAN Windows CAN device driverscisa_csaf_ot
For more information see the associated HMS security advisory.
https://www.hms-networks.com/cybersecurity
MitigationPEAK-System Device Driver Setupcisa_csaf_ot
For more information see the associated HMS security advisory.
https://www.hms-networks.com/cybersecurity

Technical severity, 0–10. One row per scoring source.

5.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · CISA US

The CWE weakness classes this flaw belongs to.

Products and version ranges known to be affected.

Vendor and ecosystem advisories describing this.

ICSA-26-293-01HMS Networks PEAK-System PCAN Windows drivers2026-10-20icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could crash the Windows kernel.

Which sources assert this record, and when.

published —modified —

External citations — patches, advisories, analysis.

No references recorded.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.