# SZB-626b3ee2d0: CISA advisory reports SQL command flaws in Subnet Solutions PowerSYSTEM Center

CISA's advisory lists Subnet Solutions PowerSYSTEM Center 2020 (up to 5.29.x), 2024 (6.0.x through 6.2.x), and 2026 (7.0.x through 7.1.x) as affected by CVE-2026-63017 and CVE-2026-63774, with a CVSS v3 score of 9.

- Type: Early warning
- Kind: Vulnerability
- Vendor: Subnet Solutions
- Product: PowerSYSTEM Center
- Status: Confirmed
- Sources: 1 distinct
- First seen: 2026-11-03 16:26 UTC
- Confirmed: 2026-11-03 16:26 UTC

Written by a model from the sources below. Verify against them.

## Summary

CISA's advisory lists Subnet Solutions PowerSYSTEM Center 2020 (up to 5.29.x), 2024 (6.0.x through 6.2.x), and 2026 (7.0.x through 7.1.x) as affected by CVE-2026-63017 and CVE-2026-63774, with a CVSS v3 score of 9. The advisory says successful exploitation could let an attacker run unauthorized SQL commands and gain access to unauthorized resources.

## What to do

- Check whether any PowerSYSTEM Center 2020, 2024, or 2026 instance runs an affected version.
- Apply the vendor's fixed release for your product line.
- Restrict network access to PowerSYSTEM Center servers until patched.
- Review the CISA CSAF advisory for remediation details.

## Timeline

- 2026-11-03 12:00 UTC: Made public by CISA advisories
- 2026-11-03 16:26 UTC: First seen by cve.now
- 2026-11-03 16:26 UTC: Confirmed by CISA advisories

## Evidence (1 source)

- 2026-11-03 · Official · [CISA advisories](https://www.cisa.gov/news-events/ics-advisories/icsa-26-307-01): “Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to unauthorized resources.”

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-626b3ee2d0&body=https%3A%2F%2Fcve.now%2FSZB-626b3ee2d0%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about SZB-626b3ee2d0

### Has Subnet Solutions confirmed it?

Yes. Confirmed by CISA advisories.

Source: https://www.cisa.gov/news-events/ics-advisories/icsa-26-307-01

### What should Subnet Solutions users do?

Check whether any PowerSYSTEM Center 2020, 2024, or 2026 instance runs an affected version. Apply the vendor's fixed release for your product line. Restrict network access to PowerSYSTEM Center servers until patched. Review the CISA CSAF advisory for remediation details.

### Does it have a CVE?

Yes. It is tracked as CVE-2026-63017 and CVE-2026-63774.

Source: https://cve.now/CVE-2026-63017, https://cve.now/CVE-2026-63774

## Tracked as

- [CVE-2026-63017](https://cve.now/CVE-2026-63017.md)
- [CVE-2026-63774](https://cve.now/CVE-2026-63774.md)

## Related

- Browse: [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/SZB-626b3ee2d0
Site guide for agents: https://cve.now/llms.txt