CVE-2025-36759CWE-200information-disclosure

CVE-2025-36759

published September 10, 2025

CVSS

8.7

EPSS

Percentile

25.6

In the wild

Unconfirmed

What it is

Through the provision of user names, SolaX Cloud will suggest (similar) user accounts and thereby leak sensitive information such as user email addresses and phone numbers.

The record

Technical detail

CVSS: 8.7 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00334 · 25.6th percentile
Weakness: CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published: 2025-09-10T13:15Z

References (2)

https://csirt.divd.nl/CVE-2025-36759 · [email protected]https://csirt.divd.nl/DIVD-2025-00015 · [email protected]

EPSS history

Timeline

10 SEP 08:50Z
Sensitive Information Disclosure in SolaX Cloud
cvelistv5