Will CVE-2026-63017 (Subnet Solutions PowerSYSTEM Center) be added to CISA KEV by end of 2026?

Subnet Solutions PowerSYSTEM Center versions ≤5.29.x contain SQL injection flaws (CVE-2026-63017) allowing unauthorized command execution and resource access, per CISA alert. Critical for ICS/SCADA environments. Resolution: CISA KEV addition or vendor advisory confirmation of active exploitation.

Resolution Criteria

YES if CVE-2026-63017 appears in CISA's Known Exploited Vulnerabilities catalog by Dec 31, 2026, or if vendor/CISA officially confirms active exploitation in the wild. NO if unpatched by year-end with no KEV or exploitation evidence.