VULNERABILITY INTELLIGENCE
CVE-2025-36757
CVSS score6.3 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2025-09-10
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Description
It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.
Weakness classification
- CWE-306: Missing Authentication for Critical Function