VULNERABILITY INTELLIGENCE

CVE-2025-36746

CVSS score5.4 MEDIUM

EPSS probability0.17%

CISA KEVNot currently listed

Published2025-12-12

Last modified2026-10-07

Description

SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt.