CRITICAL 9.4 NVD
CVE-2026-63774
Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-307-01.json
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-307-01
This critical severity vulnerability with a CVSS score of 9.4 was published on 2026-11-06 via NVD.
Risk Timeline
CVE Disclosed2026-11-06 · 0 days ago
Remediation Resources
vulnfeed aggregates 16326 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.