CVE-2026-63017: Subnet Solutions PowerSYSTEM Center Incorrect Authorization

Published Nov 6, 2026

Updated

Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade PowerSYSTEM Center to a version that resolves this vulnerability.
Fixed in 2026 Update 1.1
Upgrade
Upgrade PowerSYSTEM Center to a version that resolves this vulnerability.
Fixed in 2020 Update 30

Event History

Nov 6, 2026

CVE Published

via MITRE·12:01 AM

Data Sourced

via MITRE·12:01 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An authenticated user with low privileges can exploit it. The vulnerability does not require user interaction and can be exploited over an adjacent network.

What is the likely impact if exploitation succeeds?

A low-privileged user may gain access to resources that are normally restricted to administrators. The reported impact includes high confidentiality, integrity, and availability consequences, with scope changed.

Is anonymous access affected?

No. The vulnerability requires authentication, although only low-level privileges are needed.

CVE-2026-63017: Subnet Solutions PowerSYSTEM Center Incorrect Authorization

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact if exploitation succeeds?

Is anonymous access affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact if exploitation succeeds?

Is anonymous access affected?