High severity · published Sep 10, 2025
CVE-2025-36759
Sensitive Information Disclosure in SolaX Cloud
8.7
CVSS
0.3%
EPSS
No
On KEV
Description
Through the provision of user names, SolaX Cloud will suggest (similar) user accounts and thereby leak sensitive information such as user email addresses and phone numbers.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
SolaX Cloud · SolaX Power
before 27-06-2025 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-36759
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-36759
csirt.divd.nl
https://csirt.divd.nl/CVE-2025-36759
csirt.divd.nl
https://csirt.divd.nl/DIVD-2025-00015
More from SolaX Cloud
6.3
CVE-2025-36757
Bypass of administrator login screen in SolaX Cloud
6.3
CVE-2025-36758
Bypass of bruteforce protection in SolaX Cloud
5.8
CVE-2025-36756
Device Takeover vulnerability in SolaX Cloud