171 matches found
CVE-2026-107194
Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "logintype":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the useraccount property is required; however, a user can view the email...
CVE-2026-107194
The Sungrow iSolarCloud platform (versions before 2026) is vulnerable to an authentication bypass and account takeover . The root cause involves the processing of a login request where the parameter "login_type":"5" can be used to bypass security controls. While the system requires an email addre...
EUVD-2026-94332
Sungrow iSolarCloud before 2026 allows authentication bypass and account takeover via "logintype":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the useraccount property is required; however, a user can view the email addres...
CVE-2026-107194
Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "logintype":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the useraccount property is required; however, a user can view the email...
CVE-2026-107194
Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "logintype":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the useraccount property is required; however, a user can view the email...
CVE-2026-107194: Authentication Bypass Using an Alternate Path or Channel
Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "logintype":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the useraccount property is required; however, a user can view the email...
PT-2026-107513
Name of the Vulnerable Software and Affected Versions Sungrow iSolarCloud versions prior to 2026 Description An authentication bypass and account takeover issue exists when a login request is made using the login type parameter set to 5. This flaw could potentially lead to local blackouts across...
SUNGROW Logger1000 Panel - Detect
SUNGROW Solar Energy Inverter Monitoring Devices Logger1000 panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """SUNGROW Solar Energy Inverter Monitoring Devices Logger1000 panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...
EUVD-2025-5283
Malicious code in bioql PyPI...
EUVD-2025-5290
Malicious code in bioql PyPI...
EUVD-2025-5289
Malicious code in bioql PyPI...
EUVD-2025-5288
Malicious code in bioql PyPI...
EUVD-2025-5284
Malicious code in bioql PyPI...
EUVD-2025-5292
Malicious code in bioql PyPI...
EUVD-2025-5291
Malicious code in bioql PyPI...
EUVD-2025-5293
Malicious code in bioql PyPI...
EUVD-2025-14252
Malicious code in bioql PyPI...
EUVD-2024-44594
Malicious code in bioql PyPI...
EUVD-2025-5285
Malicious code in bioql PyPI...
CVE-2025-29756
SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's web browser. The MQTT server however did not have sufficient restrictions in place to limit the topics that a user could subscribe to. While t...