Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2025-36756

Device Takeover vulnerability in SolaX Cloud

A problem with missing authorization on SolaX Cloud platform allows taking over any SolaX solarpanel inverter of which the serial number is known.

CVSS 4.0 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Solax
Products
Solax Cloud
CVE-2025-36757

Bypass of administrator login screen in SolaX Cloud

It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Solax
Products
Solax Cloud
CVE-2025-36758

Bypass of bruteforce protection in SolaX Cloud

It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Solax
Products
Solax Cloud
CVE-2025-36759

Sensitive Information Disclosure in SolaX Cloud

Through the provision of user names, SolaX Cloud will suggest (similar) user accounts and thereby leak sensitive information such as user email addresses and phone numbers.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Solax
Products
Solax Cloud