CVE-2025-36758

Bypass of bruteforce protection in SolaX Cloud PUBLISHED

Description (CNA)

It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle.

Affected (CNA)

Vendor / product	Versions
SolaX Power / SolaX Cloud	affected before 27-06-2025

CWE

CWE-307

References

https://csirt.divd.nl/CVE-2025-36758
https://csirt.divd.nl/DIVD-2025-00015

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.