Medium · 6.3 CVE-2025-36757 EUVD-2025-27527GHSA-v72q-pq8g-gcmw

Bypass of administrator login screen in SolaX Cloud

Published Sep 10, 2025 · Updated Sep 10, 2025 · Assigned by DIVD

Vendor: SolaX Power Product: SolaX Cloud

Description

It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.

Affected products

Vendor	Product	Affected	Fixed
SolaX Power	SolaX Cloud	before 27-06-2025	—

References

https://csirt.divd.nl/CVE-2025-36757 third-party-advisory
https://csirt.divd.nl/DIVD-2025-00015 third-party-advisory