Skip to content
OpenAdvisories

Product · Growatt

Cloud portal

30 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-27939

    Growatt Cloud portal Authorization Bypass Through User-Controlled Key

    An attacker can change registered email addresses of other users and take over arbitrary accounts.

    Growatt Cloud portal
  • High 8.8
    CVE-2025-30511

    Growatt Cloud Applications Cross-site Scripting

    An authenticated attacker can achieve stored XSS by exploiting improper sanitization of the plant name value while adding or editing a plant.

    Growatt Cloud portal