CISA advisory reports SQL command flaws in Subnet Solutions PowerSYSTEM Center

Summary

CISA's advisory lists Subnet Solutions PowerSYSTEM Center 2020 (up to 5.29.x), 2024 (6.0.x through 6.2.x), and 2026 (7.0.x through 7.1.x) as affected by CVE-2026-63017 and CVE-2026-63774, with a CVSS v3 score of 9. The advisory says successful exploitation could let an attacker run unauthorized SQL commands and gain access to unauthorized resources.

What to do

• Check whether any PowerSYSTEM Center 2020, 2024, or 2026 instance runs an affected version.

• Apply the vendor's fixed release for your product line.

• Restrict network access to PowerSYSTEM Center servers until patched.

• Review the CISA CSAF advisory for remediation details.

Timeline

1. Nov 3, 2026, 12:00 PM UTCMade public by CISA advisories
2. Nov 3, 2026, 4:26 PM UTCFirst seen by cve.now
3. Nov 3, 2026, 4:26 PM UTCConfirmed by CISA advisories

Evidence 1

1. Nov 3, 2026Official
   CISA advisories

   “Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to unauthorized resources.”

Corrections

None so far.

Something wrong on this page? Report an error. Every fix is listed here.