Scam news
SQL Injection Vulnerabilities in PowerSYSTEM Center
Reported by US Cybersecurity and Infrastructure Security AgencyNovember 3, 2026
What is happening
Several security vulnerabilities have been found in Subnet Solutions' PowerSYSTEM Center. These flaws allow attackers to exploit the system, potentially accessing unauthorized resources through SQL injection.
How the scam works
Attackers take advantage of incorrect authorization and improper handling of SQL commands in the affected software versions. This lets them execute unauthorized actions on the system.
What to do
Users should update to the latest version of PowerSYSTEM Center to secure their systems. If updating is not possible, closely monitor user activities and disable certain browser features to reduce risk.
This is our summary of reporting by US Cybersecurity and Infrastructure Security Agency. We have not reproduced their article.
Read the original source