Skip to content
NewA calmer, faster ZeroHour
Vulnerability1 · 1 read

CVE-2026-63774

SQL Injection in Subnet Solutions PowerSYSTEM Center report designer

CVSS 4.0
9.4 critical
EPSS
—
Published
·
Modified
Analyze CVE-2026-63774 with Vani AIImpact, affected versions, exploitation status, mitigations and detection
AI analysisSummaries by Vani AI

Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands. An attacker with valid credentials can run arbitrary SQL through the report designer. This affects all users of the PowerSYSTEM Center report designer. Attacker gains database access or manipulation.

What to do: No fixed version or workaround specified. Contact Subnet Solutions for update on CVE-2026-63774.

ProductAffected
Subnet Solutions PowerSYSTEM Center report designer—
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.

Weakness
CWE-89
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD CVE.org GitHub PoCs EPSS (—)

In the news

2 stories