CVE-2025-27561

Unauthenticated attackers can rename "rooms" of arbitrary users...

CVE-2025-27565

An unauthenticated attacker can delete any user's "rooms" by knowing the user's and room IDs...

CVE-2025-27561

CVE-2025-27561 affects Growatt Cloud Applications (Growatt Cloud Portal). Multiple connected sources identify unauthenticated attackers can rename the target user’s “rooms,” with associated risk of unauthorized changes to user data and device groupings. Public records point to Growatt Cloud Appli...