CISA Warns of Vulnerabilities in Subnet Solutions PowerSYSTEM Center
Subnet Solutions has released patches for PowerSYSTEM Center after security flaws were identified that allow unauthorized SQL execution and administrative access.
FTMQ Security, written by our newsroom0 views
CISA Alerts reported that Subnet Solutions PowerSYSTEM Center contains critical security vulnerabilities that could allow an attacker to execute unauthorized SQL commands. Exploitation also enables low-privileged users to gain access to unauthorized resources. [1]
According to CISA Alerts, the affected software versions include PowerSYSTEM Center 2020 version 5.29.x and earlier under CVE-2026-63017. An incorrect authorization flaw in the system permits an authenticated user with low privileges to access administrative resources. [1]
The Internet functions as a global system of interconnected computer networks utilizing the TCP/IP protocol suite to link private, public, academic, business, and government networks. [2]
To mitigate these security risks, CISA Alerts stated that Subnet Solutions recommends users of PowerSYSTEM Center 2024 upgrade to PowerSYSTEM Center 2026 Update 1.1. Affected organizations can contact Subnet Solutions for assistance with the upgrade process. [1]
In short
- Subnet Solutions PowerSYSTEM Center 2020 version 5.29.x and earlier are vulnerable to SQL command execution under CVE-2026-63017.
- An incorrect authorization bug allows low-privileged users to access administrative resources.
- Subnet Solutions advises users on PowerSYSTEM Center 2024 to upgrade to PowerSYSTEM Center 2026 Update 1.1.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Subnet Solutions PowerSYSTEM CenterCISA Alerts, 14h ago (the report this story comes from)
Background
- [2]Internet on Wikipedia
Our newsroom writes these reports with the help of software, from the 2 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
More in Threat Intelligence
- CISA adds WordPress Core race condition vulnerability to catalog2h ago
- Fake GitHub PlayStation 5 Emulator Repositories Spread Information Stealing Malware1d ago
- Binance suffers digital asset theft after attackers compromise DevOps laptop1d ago
- China linked group VAPOR PANDA uses ARTEX AI framework in global campaign2d ago
- VOLTA Infostealer Uses Artificial Intelligence Models to Rank Stolen Victim Data3d ago
- TrapDoor Campaign Targets Solana Developers via Malicious Code Packages3d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.
Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.