Skip to content
NewA calmer, faster ZeroHour
Vulnerability2 · 1 read

CVE-2026-63017

Incorrect authorization in PowerSYSTEM Center allows low-privileged authenticated access

CVSS 4.0
9.4 critical
EPSS
—
Published
·
Modified
Analyze CVE-2026-63017 with Vani AIImpact, affected versions, exploitation status, mitigations and detection
AI analysisSummaries by Vani AI

PowerSYSTEM Center has an incorrect authorization flaw. A low-privileged authenticated user can access resources normally limited to administrators. This flaw can be triggered by any such user. An attacker can gain administrator access to affected resources. It affects all users running the software.

What to do: Apply Subnet Solutions update for CVE-2026-63017. No workaround provided.

ProductAffected
Subnet Solutions PowerSYSTEM Center—
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.

Weakness
CWE-863
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD CVE.org GitHub PoCs EPSS (—)

In the news

2 stories