Read the docs

SolarEdge

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

SolarEdge records in CISA KEV

No SolarEdge vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Se3680h Firmware 3 records LOW Mysolaredge 1 record MEDIUM Solaredge Monitoring Platform 1 record LOW

Records

1 record in Solaredge Monitoring Platform · all components

TI-2025-24932 CVE-2025-36746 · GHSA-37qv-3hw5-x3ph

SolarEdge Monitoring Platform contains a XSS upon report deletion

Priority LOW 21

SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00168 Published 2025-12-12 No fix listed CWE-79
Open these records in search →