CVE-2025-36759: Exposure of Sensitive Information to an Unauthorized Actor

Through the provision of user names, SolaX Cloud will suggest similar user accounts and thereby leak sensitive information such as user email addresses and phone numbers...

CVE-2025-36758: Improper Restriction of Excessive Authentication Attempts

It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle...

CVE-2025-36756: Missing Authorization

A problem with missing authorization on SolaX Cloud platform allows taking over any SolaX solarpanel inverter of which the serial number is known...

CVE-2025-36757: Missing Authentication for Critical Function

It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system...