CVE-2026-63017

Summary

A low-privileged, authenticated user can bypass intended access controls in PowerSYSTEM Center to access administrative resources due to incorrect authorization enforcement.

Exploitability

Exploitation requires a valid, low-privileged account and knowledge of protected endpoints; network proximity is needed as the attack vector is adjacent (AV:A).

Blast radius

Successful exploitation grants full administrative access, enabling data exfiltration, system modification, or service disruption across the entire system.

Detection

Monitor for low-privileged users accessing administrative API endpoints (e.g., /admin/*, /api/v1/admin/*) or performing privileged actions (e.g., user creation, config changes); look for anomalous privilege escalation in audit logs or session tokens with admin scope issued to non-admin accounts.

Prioritized remediation

Apply vendor patch version 2.590 or later, which resolves the authorization flaw; if unavailable, restrict access to administrative endpoints to users with elevated privileges only.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.