Vendors and CVEs › CVEs › CVE-2026-63017
CVE-2026-63017: what it is, who is affected and what to do
CISA lists two flaws in PowerSYSTEM Center: incorrect authorisation lets a low-privileged logged-in user reach administrator-only resources, and SQL injection could allow unauthorised database commands. The report gives a CVSS v3 score of 9.
- Scores and exploitation. The stories below cover this flaw together with others, so the Brief does not give its scores here: check the records below.
- Records. CVE-2026-63017 on the National Vulnerability Database · CISA’s known exploited catalog
The story
Critical
Subnet Solutions PowerSYSTEM Center has flaws allowing SQL commands and admin access
CISA lists two flaws in PowerSYSTEM Center: incorrect authorisation lets a low-privileged logged-in user reach administrator-only resources, and SQL injection could allow unauthorised database commands.