Skip to content
OpenAdvisories

Vendor

Orca Energy

1 known vulnerabilities.

Products

Orca heat pump 1 Orca user portal 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-25599

    Missing authentication and clear‑text data transmission affecting Orca heat pumps

    Missing authentication and clear‑text transmission of data from the heat pumps to the control server, combined with the absence of input validation on aggregated data, can lead to stored XSS that enables theft of cookies from the pump’s web control interface.…

    Orca Energy Orca user portal Orca heat pump