CVE record · 2 sources
CVE-2026-63774
CVSS 9.0Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
- Vendor
- Subnet Solutions
- Product
- PowerSYSTEM Center 2024, PowerSYSTEM Center 2026
- CVSS v3.1
- 9.0 AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weakness
- CWE-89
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
-
Subnet Solutions PowerSYSTEM Center
Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to unauthorized resources. The following versions of Subnet Solutions PowerSYSTEM Center are affected…