CVE-2026-107194

Sungrow iSolarCloud before 2026 allows authentication bypass and account takeover via "logintype":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the useraccount property is required; however, a user can view the email addres...

CVE-2026-107194

Sungrow iSolarCloud before 2026 allows authentication bypass and account takeover via "logintype":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the useraccount property is required; however, a user can view the email addres...

CVE-2026-107194

The Sungrow iSolarCloud platform (versions before 2026) is vulnerable to an authentication bypass and account takeover . The root cause involves the processing of a login request where the parameter "login_type":"5" can be used to bypass security controls. While the system requires an email addre...

EUVD-2026-94332

Sungrow iSolarCloud before 2026 allows authentication bypass and account takeover via "logintype":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the useraccount property is required; however, a user can view the email addres...

PT-2026-107513

Sungrow iSolarCloud before 2026 allows authentication bypass and account takeover via "login type":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the user account property is required; however, a user can view the email...

EUVD-2025-5293

Malicious code in bioql PyPI...

EUVD-2025-5285

Malicious code in bioql PyPI...

EUVD-2025-5290

Malicious code in bioql PyPI...

EUVD-2025-5291

Malicious code in bioql PyPI...

EUVD-2025-5292

Malicious code in bioql PyPI...

EUVD-2025-5284

Malicious code in bioql PyPI...

EUVD-2025-5289

Malicious code in bioql PyPI...

EUVD-2025-14252

Malicious code in bioql PyPI...

EUVD-2024-44594

Malicious code in bioql PyPI...

EUVD-2025-5288

Malicious code in bioql PyPI...

EUVD-2025-5283

Malicious code in bioql PyPI...

CVE-2025-29756

SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's web browser. The MQTT server however did not have sufficient restrictions in place to limit the topics that a user could subscribe to. While t...

CVE-2025-29756 MQTT implementation in Sungrow iSolarCloud allowed users to subscribe to all data of all connected inverters

SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's web browser. The MQTT server however did not have sufficient restrictions in place to limit the topics that a user could subscribe to. While...

CVE-2025-29756 MQTT implementation in Sungrow iSolarCloud allowed users to subscribe to all data of all connected inverters

SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's web browser. The MQTT server however did not have sufficient restrictions in place to limit the topics that a user could subscribe to. While...

CVE-2025-29756

The CVE-2025-29756 entry describes a vulnerability in SunGrow iSolarCloud’s MQTT service used by the backend for device data transport. The MQTT broker reportedly lacks sufficient topic-subscription restrictions, enabling a user with an iSolarCloud account to subscribe to any topic (notably the a...