CVE-2025-36758

6.3 mediumEPSS 0.4%

Medium (6.3). EPSS 0.4% chance of exploitation in the next 30 days.

It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle.

Severity

CVSS 4.0

6.3 medium

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-307
Published: 2025-09-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://csirt.divd.nl/CVE-2025-36758
https://csirt.divd.nl/DIVD-2025-00015

Check your stack JSON