VulnerabilityDeferred

CVE-2025-36757

It is possible to bypass the administrator login screen on SolaX Cloud.

MEDIUM 6.3EPSS 0.34%

Does this matter?

Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.

Description

It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.

CVSS 4.0: 6.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.34% probability · 27th percentile
CISA KEV: Not listed
Weakness: CWE-306
Source: csirt@divd.nl

References

https://csirt.divd.nl/CVE-2025-36757
https://csirt.divd.nl/DIVD-2025-00015

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.