CVE-2025-36758CWE-307

Bypass of bruteforce protection in SolaX Cloud

Medium · published September 10, 2025

CVSS v4.0
6.3
EPSS
0%
Percentile
32.0
In the wild
Unconfirmed
What it is

It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00391 · 32.0th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2025-09-10T08:50Z
EPSS history
Timeline
  • 10 SEP 08:50Z
    Bypass of bruteforce protection in SolaX Cloud
    cvelistv5