CVE-2025-36757 in SolaX Cloud

Resumen

por MITRE • 2025-09-10

It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain limited access to the system.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: DIVD
• Reservar: 2025-04-15
• Divulgación: 2025-09-10
• Moderación: aceptado
• Artículo: VDB-323479
• CPE: listo
• CWE: CWE-306 (confirmado)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00314
• KEV: no
• Actividades: muy bajo
• Sector: Government, Lawfirm, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-36757
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-36757
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-36757/