CVE-2026-63017

Description

Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-63017 ↗
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-307-01.json ↗
• www.cisa.gov/news-events/ics-advisories/icsa-26-307-01 ↗

Related CVEs

• CVE-2026-113615GS JWT Authentication for WP REST APICVSS 9.8
• CVE-2026-113584placesterCVSS 9.8
• CVE-2026-110955WurdeyCVSS 9.8
• CVE-2026-63774Subnet Solutions / PowerSYSTEM Center 2024 · +1CVSS 9.4
• CVE-2026-77596kubeflow / pipelinesCVSS 9.6
• CVE-2026-119757BTCPay Server / BTCPay ServerCVSS 9.3
• CVE-2026-111494TPC Software / MatchpointCVSS 9.1
• CVE-2026-111490TPC Software / MatchpointCVSS 9.9