CISA issued an advisory regarding two critical vulnerabilities in Subnet Solutions PowerSYSTEM Center. These flaws, identified as CVE-2026-63017 and CVE-2026-63774, allow attackers to execute unauthorized SQL commands and access restricted resources. The vulnerabilities affect versions 2020 through 2026 of the software, which is deployed worldwide in critical manufacturing and energy sectors. Subnet Solutions recommends upgrading to PowerSYSTEM Center 2026 Update 1.1 or applying specific mitigations if updates are not possible. CISA advises organizations to minimize network exposure and isolate control system devices from business networks.
Read the full story at cisa.gov.
Photo: Pexels / Pixabay
