Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-26289

Subnet Solutions PowerSYSTEM Center Incorrect Authorization

Description

PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administrative permissions only.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Subnet Solutions PowerSYSTEM Center 2020

Default version status: unaffected

  • 5.8.x to ≤ 5.28.xaffected

Subnet Solutions PowerSYSTEM Center 2024

Default version status: unaffected

  • 6.0.x to ≤ 6.1.xaffected

Subnet Solutions PowerSYSTEM Center 2026

Default version status: unaffected

  • 7.0.xaffected

References