Description
PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Subnet Solutions | PowerSYSTEM Center 2020 | ≤ 5.28.x | — |
| Subnet Solutions | PowerSYSTEM Center 2024 | 6.0.x – ≤ 6.1.x | — |
| Subnet Solutions | PowerSYSTEM Center 2026 | 7.0.x | — |
Advisories 1
- ICSA-26-132-02 Subnet Solutions PowerSYSTEM Center CISA ICS & IT advisories · May 12, 2026