Vulnerabilidades de Sungrow
CVEs publicadas que afetam produtos de Sungrow: 1 registro(s), com severidade, exploração e correções.
CVE-2026-107194
Crítica · 9.2
CWE-288 07/10/2026
Authentication Bypass Using an Alternate Path or Channel em Sungrow iSolarCloud
Sungrow iSolarCloud before 2026 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the user_account property is required; however, a user can view the email address associated with their parent organization.