CVE-2025-27719 Growatt Cloud portal Authorization Bypass Through User-Controlled Key

Unauthenticated attackers can query an API endpoint and get device details...

CVE-2025-27719 Growatt Cloud portal Authorization Bypass Through User-Controlled Key

Unauthenticated attackers can query an API endpoint and get device details...

CVE-2025-27719

CVE-2025-27719 affects Growatt Cloud Applications (Growatt Cloud portal). An unauthenticated user can query an API endpoint and obtain device details, indicating an information-disclosure risk. Connected sources indicate this vulnerability exists in Growatt Cloud Applications version 3.6.0 and ea...

CVE-2025-27719

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04 2025-04-16 01:49:06+00:00| seen| https://t.me/cvedetector/23031...