What’s Vulnerable › Vulnerabilities
CVE-2025-36757: Bypass of administrator login screen in SolaX Cloud
- Severity: medium (CVSS 6.3 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-09-10 · updated 2026-06-17
- Weakness: CWE-306
Description
It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.
Affected products
- SolaX Power SolaX Cloud: before 27-06-2025
References
Get alerted when CVE-2025-36757 or the next vulnerability affects your stack