Critical severity9.0NVD Advisory· Published Nov 3, 2026
Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
CVE-2026-63774
Description
Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
Patches
Vulnerability mechanics
News mentions
1- Subnet Solutions PowerSYSTEM CenterCISA ICS Advisories