Skip to content
OpenAdvisories
Medium · 5.7 CVE-2026-33570 EUVD-2026-29829GHSA-g52x-wvq2-4h58

Subnet Solutions PowerSYSTEM Center Incorrect Authorization

Published May 12, 2026 · Updated May 13, 2026 · Assigned by icscert

Description

PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to access information normally limited by operational permissions.

Affected products

VendorProductAffectedFixed
Subnet Solutions PowerSYSTEM Center 2020 5.11.x – ≤ 5.28.x —

Advisories 1

References