TI-2025-12732 CVE-2025-13932 · GHSA-rj4p-qc9g-j2p3
Authorization bypass in SolisCloud Monitoring Platform
Priority MEDIUM 42
The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any authenticated user can access detailed data of any plant by altering the plant_id…