CVE-2025-36759

Sensitive Information Disclosure in SolaX Cloud PUBLISHED

Description (CNA)

Through the provision of user names, SolaX Cloud will suggest (similar) user accounts and thereby leak sensitive information such as user email addresses and phone numbers.

Affected (CNA)

Vendor / product	Versions
SolaX Power / SolaX Cloud	affected before 27-06-2025

CWE

CWE-200

References

https://csirt.divd.nl/CVE-2025-36759
https://csirt.divd.nl/DIVD-2025-00015

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.