Live · 98 sources · updated 4m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 2 sources

CVE-2026-63774

CVSS 9.0

Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.

Vendor
Subnet Solutions
Product
PowerSYSTEM Center 2024, PowerSYSTEM Center 2026
CVSS v3.1
9.0 AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-89

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. CVE NVD

    Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.

    Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.

  2. ICS advisory CISA ICS

    Subnet Solutions PowerSYSTEM Center

    Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to unauthorized resources. The following versions of Subnet Solutions PowerSYSTEM Center are affected…

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help