CVE-2025-36757 MEDIUM

CVE-2025-36757: Bypass of administrator login screen in SolaX Cloud

Vendor Solax Power
Product SolaX Cloud
Weakness CWE-306 · Missing auth
Published September 10, 2025
Last update September 10, 2025
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.

Key dates

02Disclosure timeline

September 10, 2025 CVE published
September 10, 2025 Record updated