Medium severity · published Sep 10, 2025
CVE-2025-36758
Bypass of bruteforce protection in SolaX Cloud
6.3
CVSS
0.4%
EPSS
No
On KEV
Description
It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
SolaX Cloud · SolaX Power
before 27-06-2025 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-36758
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-36758
csirt.divd.nl
https://csirt.divd.nl/CVE-2025-36758
csirt.divd.nl
https://csirt.divd.nl/DIVD-2025-00015
More from SolaX Cloud
8.7
CVE-2025-36759
Sensitive Information Disclosure in SolaX Cloud
6.3
CVE-2025-36757
Bypass of administrator login screen in SolaX Cloud
5.8
CVE-2025-36756
Device Takeover vulnerability in SolaX Cloud