Skip to content
OpenAdvisories
Medium · 5.8 CVE-2025-36756 EUVD-2025-27529GHSA-5jwf-gxj6-4f88

Device Takeover vulnerability in SolaX Cloud

Published Sep 10, 2025 · Updated Sep 10, 2025 · Assigned by DIVD

Vendor: SolaX Power Product: SolaX Cloud

Description

A problem with missing authorization on SolaX Cloud platform allows taking over any SolaX solarpanel inverter of which the serial number is known.

Affected products

VendorProductAffectedFixed
SolaX Power SolaX Cloud before 27-06-2025 —

References