Description
Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Subnet Solutions | PowerSYSTEM Center 2024 | 6.0.x – ≤ 6.2.x | PowerSYSTEM Center 2026 Update 1.1 |
| Subnet Solutions | PowerSYSTEM Center 2026 | 7.0.x – ≤ 7.1.x | Update 1.1 |
Advisories 1
- ICSA-26-307-01 Subnet Solutions PowerSYSTEM Center CISA ICS & IT advisories · Nov 3, 2026