CVE-2026-26289 — Subnet Solutions PowerSYSTEM Center Incorrect Authorization
PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to admin…
Published: 2026-05-12 · CVSS: 8.4 · CVSS 4.0
PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administrative permissions only.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7