---
id: CVE-2026-63017
title: Subnet Solutions PowerSYSTEM Center Incorrect Authorization
summary: >-
  Incorrect authorization in PowerSYSTEM Center allows a low-privileged,
  authenticated user to access resources normally limited to administrators.
severity: critical
cvss: 9
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-863
vendor: Subnet Solutions
product: PowerSYSTEM Center 2020
affected:
  - powersystem_center_2020 <= 5.29.x
  - powersystem_center_2024 >= 6.0.x <= 6.2.x
  - powersystem_center_2026 >= 7.0.x <= 7.1.x
published: '2026-11-06'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T00:06:42.203Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-63017'
references:
  - url: 'https://www.cisa.gov/news-events/ics-advisories/icsa-26-307-01'
  - url: >-
      https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-307-01.json
tags:
  - cve.org
ingestedAt: '2026-11-06T00:42:24.724Z'
epss: 0.00266
epssPercentile: 0.18619
---

## Overview

Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.

## Affected

- `powersystem_center_2020 <= 5.29.x`
- `powersystem_center_2024 >= 6.0.x <= 6.2.x`
- `powersystem_center_2026 >= 7.0.x <= 7.1.x`

## Remediation

For users who are currently using PowerSYSTEM Center 2024, Subnet Solutions recommends users upgrade to PowerSYSTEM Center 2026 Update 1.1. For assistance in upgrading, users should contact the Subnet Solutions System Integration team or customer support team at (403) 270-8885 or by email at support@subnet.com.

Subnet Solutions recommends users update to PowerSYSTEM Center 2020 Update 30. For assistance in upgrading, users should contact the Subnet Solutions System Integration team or customer support team at (403) 270-8885 or by email at support@subnet.com.

Subnet Solutions recommends users update to PowerSYSTEM Center 2026 Update 1.1. For assistance in upgrading, users should contact the Subnet Solutions System Integration team or customer support team at (403) 270-8885 or by email at support@subnet.com.

### Workarounds

If unable to update to the latest version, Subnet Solutions recommends users monitor user activity records to ensure users are following acceptable usage policies of the application. Subnet Solutions also recommends disabling PowerSYSTEM Center Client Access Server users' ability to access the browser's F12 Developer Tools.