CVE-2025-36757CWE-306

Bypass of administrator login screen in SolaX Cloud

Medium · published September 10, 2025

CVSS v4.0
6.3
EPSS
0%
Percentile
25.8
In the wild
Unconfirmed
What it is

It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00336 · 25.8th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-09-10T08:50Z
EPSS history
Timeline
  • 10 SEP 08:50Z
    Bypass of administrator login screen in SolaX Cloud
    cvelistv5