Medium severity · published Sep 10, 2025
CVE-2025-36757
Bypass of administrator login screen in SolaX Cloud
6.3
CVSS
0.3%
EPSS
No
On KEV
Description
It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
SolaX Cloud · SolaX Power
before 27-06-2025 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-36757
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-36757
csirt.divd.nl
https://csirt.divd.nl/CVE-2025-36757
csirt.divd.nl
https://csirt.divd.nl/DIVD-2025-00015
More from SolaX Cloud
8.7
CVE-2025-36759
Sensitive Information Disclosure in SolaX Cloud
6.3
CVE-2025-36758
Bypass of bruteforce protection in SolaX Cloud
5.8
CVE-2025-36756
Device Takeover vulnerability in SolaX Cloud