As cited
Copy frozen at (site build).
ot ics
Subnet Solutions PowerSYSTEM Center
Subnet Solutions released a CISA advisory for two critical vulnerabilities in PowerSYSTEM Center affecting versions 2020, 2024, and 2026. CVE-2026-63017 allows low-privileged authenticated users to access administrator resources through incorrect authorization, while CVE-2026-63774 enables SQL injection via the report designer. Both vulnerabilities carry a CVSS v3.1 score of 9 and require network access with authenticated privileges, with Subnet Solutions recommending immediate patching or mitigation measures.
Why it matters: Organizations operating PowerSYSTEM Center in critical manufacturing and energy sectors must patch to the latest versions immediately to prevent authenticated attackers from escalating privileges and executing unauthorized database commands, which could compromise control system integrity.
- Source published
- First seen by Cybersecurity Tracker