Subnet Solutions vulnerabilities
Published CVEs affecting Subnet Solutions products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-35555
Medium · 6.3
CWE-863 May 12, 2026
Subnet Solutions PowerSYSTEM Center Incorrect Authorization
PowerSYSTEM Center feature for device project groups allows an authenticated user with limited permissions to perform an unauthorized deletion of project groups.
CVE-2026-33570
Medium · 5.7
CWE-863 May 12, 2026
Subnet Solutions PowerSYSTEM Center Incorrect Authorization
PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to access information normally limited by operational permissions.
CVE-2026-26289
High · 8.2
CWE-863 May 12, 2026
Subnet Solutions PowerSYSTEM Center Incorrect Authorization
PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administrative permissions only.
CVE-2026-35504
Medium · 5.5
CWE-93 May 12, 2026
Subnet Solutions PowerSYSTEM Center CRLF injection
PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communication.