Approved changes feed: RSS · Atom

cpe:2.3:a:solax_power:solax_cloud:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSolax Power (b2e5ba61-1eab-5f0f-b6a7-fe738a04e54d)
ProductSolax Cloud (1c15109b-c22b-5ef2-83b1-cb8ccbaeb1c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36759 vulnerable 2026-06-08 07:21:02.156041 Sensitive Information Disclosure in SolaX Cloud
Through the provision of user names, SolaX Cloud will suggest (similar) user accounts and thereby leak sensitive information such as user email addresses and phone numbers.
Published: 2025-09-10T08:50:56.409Z
Updated: 2025-09-10T18:38:08.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36758 vulnerable 2026-06-08 07:21:02.155766 Bypass of bruteforce protection in SolaX Cloud
It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle.
Published: 2025-09-10T08:50:54.789Z
Updated: 2025-09-10T19:13:51.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36757 vulnerable 2026-06-08 07:21:02.155361 Bypass of administrator login screen in SolaX Cloud
It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.
Published: 2025-09-10T08:50:55.697Z
Updated: 2025-09-10T18:50:46.301Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36756 vulnerable 2026-06-08 07:21:02.155007 Device Takeover vulnerability in SolaX Cloud
A problem with missing authorization on SolaX Cloud platform allows taking over any SolaX solarpanel inverter of which the serial number is known.
Published: 2025-09-10T08:50:53.996Z
Updated: 2025-09-10T19:27:07.146Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.