Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-36759 1 Solax 1 Solax Cloud 2025-09-12 N/A
Through the provision of user names, SolaX Cloud will suggest (similar) user accounts and thereby leak sensitive information such as user email addresses and phone numbers.
CVE-2025-36756 1 Solax 1 Solax Cloud 2025-09-12 N/A
A problem with missing authorization on SolaX Cloud platform allows taking over any SolaX solarpanel inverter of which the serial number is known.
CVE-2025-36757 1 Solax 1 Solax Cloud 2025-09-12 N/A
It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.
CVE-2025-36758 1 Solax 1 Solax Cloud 2025-09-12 N/A
It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle.