PT-2026-40442 · Unknown · Powersystem Center

Kelly Stich · Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-35555

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions PowerSYSTEM Center (affected versions not specified)

Description The device project groups feature allows an authenticated user with limited permissions to perform an unauthorized deletion of project groups.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-35555

Affected Products

Powersystem Center

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-35555 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-132-02.json · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-132-02 · Note
• https://twitter.com/CVEnew/status/2054324006367670506 · Twitter Post