CVE Intelligence

SolisCloud Monitoring Platform (Cloud API & Device Control API) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting SolisCloud Monitoring Platform (Cloud API & Device Control API): 1 record(s), with affected versions and fixes.

CVE-2025-13932 High · 8.3 CWE-639 Dec 4, 2025
Authorization Bypass Through User-Controlled Key (IDOR) in SolisCloud Monitoring Platform (Cloud API & Device Control API)
The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any authenticated user can access detailed data of any plant by altering the plant_id in the request.