Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: SunGrow Clear all filters
TI-2026-69151 CVE-2026-107194 · GHSA-8f9m-p66m-hj4m

Authentication bypass in Sungrow iSolarCloud enables account takeover

Priority MEDIUM 48

Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00447 Published 2026-10-07 Fixed in 2026-08-25 CWE-288
TI-2025-04049 CVE-2025-4534 · GHSA-w886-q54p-h4w2

SunGrow Logger1000 weak password

Priority MEDIUM 61

A vulnerability, which was classified as problematic, has been found in SunGrow Logger1000 01_A.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00429 Published 2025-05-11 No fix listed CWE-521