Vulnerabilidades de Subnet Solutions
CVEs publicadas que afetam produtos de Subnet Solutions: 4 registro(s), com severidade, exploração e correções.
CVE-2026-35555
Média · 6.3
CWE-863 12/05/2026
Subnet Solutions PowerSYSTEM Center Incorrect Authorization
PowerSYSTEM Center feature for device project groups allows an authenticated user with limited permissions to perform an unauthorized deletion of project groups.
CVE-2026-33570
Média · 5.7
CWE-863 12/05/2026
Subnet Solutions PowerSYSTEM Center Incorrect Authorization
PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to access information normally limited by operational permissions.
CVE-2026-26289
Alta · 8.2
CWE-863 12/05/2026
Subnet Solutions PowerSYSTEM Center Incorrect Authorization
PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administrative permissions only.
CVE-2026-35504
Média · 5.5
CWE-93 12/05/2026
Subnet Solutions PowerSYSTEM Center CRLF injection
PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communication.