PowerSYSTEM Center flaws prompt CISA to warn on unauthorized access
CISA has warned about two critical PowerSYSTEM Center flaws with CVSS 9.0 scores that could let authenticated users reach administrator resources or run unauthorized database commands. The issue affects energy and manufacturing sectors worldwide, and the advisory says the vulnerabilities are not remotely exploitable. The agency issued advisory ICSA-26-307-01 on November 3, 2026. CISA credited Chinmay Patel of Digital Boundary Group and Subnet Solutions with reporting the vulnerabilities. The Canadian…