CVE-2025-36758 MEDIUM

CVE-2025-36758: Bypass of bruteforce protection in SolaX Cloud

Vendor Solax Power

Product SolaX Cloud

Weakness CWE-307 · Brute force

Published September 10, 2025

Last update September 10, 2025

View on NVD All CVEs

CVSS base score

6.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle.

Key dates

02Disclosure timeline

September 10, 2025 CVE published

September 10, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-36758 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/307.html

Related vulnerabilities

CVE-2025-36758: Bypass of bruteforce protection in SolaX Cloud

01Description

02Disclosure timeline

03References

04Related CVE