CVE-2025-36757
Severity CVSS v4.0:
MEDIUM
Type:
CWE-306
Missing Authentication for Critical Function
Publication date:
10/09/2025
Last modified:
11/09/2025
Description
It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.
Impact
Base Score 4.0
6.30
Severity 4.0
MEDIUM