CVE-2025-36757

6.3 mediumEPSS 0.3%

Medium (6.3). EPSS 0.3% chance of exploitation in the next 30 days.

It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.

Severity

CVSS 4.0

6.3 medium

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2025-09-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://csirt.divd.nl/CVE-2025-36757
https://csirt.divd.nl/DIVD-2025-00015

Check your stack JSON