{"metadata": {"vulnerability": "CVE-2026-63017", "count": 21, "kinds": {"milestone": 5, "sighting": 8, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-07-27T21:24:52.071Z", "date_only": false, "value": "2026-07-27T21:24:52.071Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-63017", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-02T17:15:26.070Z", "date_only": false, "value": "2026-11-02T17:15:26.070184Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-307-01", "record": "ICSA-26-307-01", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-03T06:00:00Z", "date_only": false, "value": "2026-11-03T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-307-01", "record": "ICSA-26-307-01", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-11-03T06:00:00Z", "date_only": false, "value": "2026-11-03T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-307-01", "record": "ICSA-26-307-01", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-03T06:00:00Z", "date_only": false, "value": "2026-11-03T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-307-01", "record": "ICSA-26-307-01", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-11-03T20:05:33.507Z", "date_only": false, "value": "2026-11-03T20:05:33.507122Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mzgn6iim672y", "record": "CVE-2026-63017", "field": "creation_timestamp", "uuid": "7c9b7b5a-45cd-4c0e-8500-21c31f091663", "content": "~Cisa~\nAuthenticated users can bypass authorization or execute SQL commands; update to 2026 Update 1.1.\n-\nIOCs: CVE-2026-63017, CVE-2026-63774\n-\n#CVE-2026-63017 #CVE-2026-63774 #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mzgn6iim672y"}, {"timestamp": "2026-11-06T00:01:21.625Z", "date_only": false, "value": "2026-11-06T00:01:21.625Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-63017", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-06T00:06:42.203Z", "date_only": false, "value": "2026-11-06T00:06:42.203Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-63017", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-06T00:06:42.203Z", "date_only": false, "value": "2026-11-06T00:06:42.203Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / icscert", "record": "CVE-2026-63017", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-06T00:32:47.032Z", "date_only": false, "value": "2026-11-06T00:32:47.032702Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117566679716318582", "record": "CVE-2026-63017", "field": "creation_timestamp", "uuid": "e657b505-978f-443a-bbb7-a96f2fab56d4", "content": "CVE-2026-63017 Subnet Solutions PowerSYSTEM Center Incorrect Authorization Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.\nhttps://www.cve.org/CVERecord?id=CVE-2026-63017https://www.cisa.gov/news-events/ics-advisories/icsa-26-307-01https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-307-01.json#SubnetSolutions #PowerSYSTEMCenter2020 #PowerSYSTEMCenter2024 #PowerSYSTEMCenter2026#CVE_2026_63017#bot", "url": "https://infosec.exchange/users/cve/statuses/117566679716318582"}, {"timestamp": "2026-11-06T01:17:50Z", "date_only": false, "value": "2026-11-06T01:17:50Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M3VG-MR9J-3FV3", "record": "GHSA-M3VG-MR9J-3FV3", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-06T01:17:50.297Z", "date_only": false, "value": "2026-11-06T01:17:50.297", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63017", "record": "FKIE_CVE-2026-63017", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T01:17:50.297Z", "date_only": false, "value": "2026-11-06T01:17:50.297", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-63017", "record": "FKIE_CVE-2026-63017", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-06T01:30:28.618Z", "date_only": false, "value": "2026-11-06T01:30:28.618183Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j2ula5bv4tsxk", "record": "CVE-2026-63017", "field": "creation_timestamp", "uuid": "b89bd04d-c7d2-46f0-8668-5249585139be", "content": "CVE-2026-63017 - Subnet Solutions PowerSYSTEM Center Incorrect Authorization\nCVE ID : CVE-2026-63017\n \n Published : Nov. 6, 2026, 12:01 a.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to ac...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/j2ula5bv4tsxk"}, {"timestamp": "2026-11-06T01:46:17.407Z", "date_only": false, "value": "2026-11-06T01:46:17.407677Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzmb5m5zje2l", "record": "CVE-2026-63017", "field": "creation_timestamp", "uuid": "86949e5c-ff5a-4a4d-9af7-e1e8460b1f20", "content": "\ud83d\udd34 CVE-2026-63017 - Critical (9)\n\nIncorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to acce...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63017/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mzmb5m5zje2l"}, {"timestamp": "2026-11-06T02:06:52.622Z", "date_only": false, "value": "2026-11-06T02:06:52.622621Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eventmonitor.bsky.social/post/3mzp75jy2zoe7", "record": "cve-2026-63017", "field": "creation_timestamp", "uuid": "ca15a164-7495-45dd-ab80-cdefba638940", "content": "Developing: Critical PowerSYSTEM Center Vulnerability (CVE-2026-63017)\nhttps://cyber.eventmonitor.net/incident/EM-20261103-L9AD/critical-powersystem-center-vulnerability-cve-2026-63017/\n#news #cybersecurity", "url": "https://bsky.app/profile/eventmonitor.bsky.social/post/3mzp75jy2zoe7"}, {"timestamp": "2026-11-06T02:07:02.903Z", "date_only": false, "value": "2026-11-06T02:07:02.903515Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mzmccpvtwo2y", "record": "CVE-2026-63017", "field": "creation_timestamp", "uuid": "3bfad5fe-e935-4833-9c6b-e8850c6981f4", "content": "CISA warns of critical Subnet Solutions PowerSYSTEM Center flaws CVE-2026-63017 and CVE-2026-63774 that allow authorization bypass and SQL injection.\n\n#SubnetSolutions #PowerSYSTEMCenter #ICSSecurity #Cybersecurity #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mzmccpvtwo2y"}, {"timestamp": "2026-11-06T02:07:52.439Z", "date_only": false, "value": "2026-11-06T02:07:52.439484Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzmce7p4sv2y", "record": "CVE-2026-63017", "field": "creation_timestamp", "uuid": "6c384977-2a74-4fae-b7d9-7484b62be6b0", "content": "\ud83d\udea8 CVE-2026-63017 \u2014 CVSS 9.4 CRITICAL\n\nIncorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resourc...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-63017\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzmce7p4sv2y"}, {"timestamp": "2026-11-06T02:20:03.821Z", "date_only": false, "value": "2026-11-06T02:20:03.821586Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzmczylzmz24", "record": "CVE-2026-63017", "field": "creation_timestamp", "uuid": "ea786a05-7a29-447d-9883-22a637ca9c67", "content": "CVE-2026-63017\nPowerSYSTEM Center does not correctly check a user\u2019s rights, so a user with limited permissions can view or change settings that should be reserved for administrators. This could lead to unauthorized changes or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzmczylzmz24"}, {"timestamp": "2026-11-06T03:30:29Z", "date_only": false, "value": "2026-11-06T03:30:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M3VG-MR9J-3FV3", "record": "GHSA-M3VG-MR9J-3FV3", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T03:30:29Z", "date_only": false, "value": "2026-11-06T03:30:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M3VG-MR9J-3FV3", "record": "GHSA-M3VG-MR9J-3FV3", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-07T19:41:20.277Z", "anchors": {"origin": {"timestamp": "2026-11-03T06:00:00Z", "date_only": false, "value": "2026-11-03T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-307-01", "record": "ICSA-26-307-01", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-03T06:00:00Z", "date_only": false, "value": "2026-11-03T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-307-01", "record": "ICSA-26-307-01", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 394880.277198, "hours": 109.68896588833333, "days": 4.570373578680556, "min_seconds": 394880.277198, "max_seconds": 394880.277198, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-03T06:00:00Z", "date_only": false, "value": "2026-11-03T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-307-01", "record": "ICSA-26-307-01", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-07T19:41:20.277Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}