Powersystem Center 2020 CVEs and Security Vulnerabilities

CVE-2026-63017

Subnet Solutions PowerSYSTEM Center Incorrect Authorization

Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Subnet Solutions

Products

Powersystem Center 2020 Powersystem Center 2024 Powersystem Center 2026

CVE-2026-35504

Subnet Solutions PowerSYSTEM Center CRLF injection

PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communication.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Subnet Solutions

Products

Powersystem Center 2020 Powersystem Center 2024 Powersystem Center 2026

CVE-2026-33570

Subnet Solutions PowerSYSTEM Center Incorrect Authorization

PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to access information normally limited by operational permissions.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Subnet Solutions

Products

Powersystem Center 2020

CVE-2026-26289

Subnet Solutions PowerSYSTEM Center Incorrect Authorization

PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administrative permissions only.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Subnet Solutions

Products

Powersystem Center 2020 Powersystem Center 2024 Powersystem Center 2026

Search vulnerabilities

Subnet Solutions PowerSYSTEM Center Incorrect Authorization

Subnet Solutions PowerSYSTEM Center CRLF injection

Subnet Solutions PowerSYSTEM Center Incorrect Authorization

Subnet Solutions PowerSYSTEM Center Incorrect Authorization