CVE-2026-63774
Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated…
- Risk score
- 59/100
- CVSS
- 9.0 v3.1
- Published
- 6 Nov 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 9.0 critical
- Named in a government or vendor bulletin
Government and vendor bulletins
References
Original description
Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
Last activity 6 Nov 2026. Patch Forecast updates every hour.