← Back to CVE search

CVE-2026-26289

PowerSYSTEM Center

Description

PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administrative permissions only.

CVSS 8.2EPSS 0.135%Risk 0.83
View source
Published
2026-05-12 22:16:32
Affected versions
unknown
Type
Core software
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L