VULNERABILITY INTELLIGENCE

CVE-2025-13932

CVSS score8.3 HIGH

EPSS probability0.26%

CISA KEVNot currently listed

Published2025-12-04

Last modified2026-10-18

Description

The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any authenticated user can access detailed data of any plant by altering the plant_id in the request.