CVE-2025-31950

An unauthenticated attacker can obtain EV charger energy consumption information of other users...

CVE-2025-31950

Growatt Cloud Applications (affected: version 3.6.0 and earlier) exposes an information-disclosure vulnerability allowing an unauthenticated attacker to obtain other users’ EV charger energy consumption data. Root cause: improper access control enabling retrieval of sensitive energy data. Impact ...