SolisCloud vulnerabilities

🔔 Create alert RSS

Published CVEs affecting SolisCloud products: 1 record(s), with severity, exploitation and fixes.

Monitoring Platform (Cloud API & Device Control API) 1

Exploited only (KEV) →

CVE-2025-13932 High · 8.3 CWE-639 Dec 4, 2025

Authorization Bypass Through User-Controlled Key (IDOR) in SolisCloud Monitoring Platform (Cloud API & Device Control API)

The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any authenticated user can access detailed data of any plant by altering the plant_id in the request.