---
id: "CVE-2026-105960"
kind: "vulnerability"
aliases: ["CVE-2026-105960"]
title: "PEAK-System PCAN driver: receive-record copy can exceed caller buffer"
severity: "medium"
cvss: 6.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "pcan", "peak-system", "windows"]
not_affected_if: []
published_at: "2026-10-20T21:17:15+00:00"
first_seen_at: "2026-10-23T21:57:21+00:00"
updated_at: "2026-10-25T03:44:37+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105960", "first_seen_at": "2026-10-23T21:57:21+00:00"}]
---

# PEAK-System PCAN driver: receive-record copy can exceed caller buffer

PEAK-System's PCAN driver copies a variable-length receive record using a requested or queued record count without capping the copy to the caller's output buffer length. The sources do not state what an attacker can read or write beyond that buffer or what privilege they need.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-23T21:57:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105960

## From the sources

PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping the copy to the actual caller-supplied output length.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_