Daily OT Security News: November 04, 2026

Five source-verified developments and their operational implications. 1. CISA flags authorization and SQL-injection flaws in Subnet Solutions PowerSYSTEM Center CISA's advisory ICSA-26-307-01 identifies incorrect authorization and SQL-injection vulnerabilities in Subnet Solutions' PowerSYSTEM Center, which is deployed worldwide in the energy and critical manufacturing sectors. Successful exploitation could permit unauthorized SQL commands and access to unauthorized resources. CISA lists PowerSYSTEM Center 2020 versions ≤5.29.x with one vulnerability; 2024 versions ≥6.0.x and ≤6.2.x with two; and 2026 versions ≥7.0.x and ≤7.1.x with two. CISA says the vulnerabilities are not remotely exploitable and that no known public exploitation specifically targeting them had been…