CVE-2026-63774

Description

Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-63774 ↗
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-307-01.json ↗
• www.cisa.gov/news-events/ics-advisories/icsa-26-307-01 ↗

Related CVEs

• CVE-2026-115230WHIZZCVSS 9.8
• CVE-2026-113615GS JWT Authentication for WP REST APICVSS 9.8
• CVE-2026-113584placesterCVSS 9.8
• CVE-2026-110955WurdeyCVSS 9.8
• CVE-2026-63017Subnet Solutions / PowerSYSTEM Center 2020 · +2CVSS 9.4
• CVE-2026-77596kubeflow / pipelinesCVSS 9.6
• CVE-2026-119757BTCPay Server / BTCPay ServerCVSS 9.3
• CVE-2026-111494TPC Software / MatchpointCVSS 9.1