CyberSecBulletin

SunGrow vulnerabilities

We track 2 vulnerabilities in SunGrow products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 7, 2026.

2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score

Latest SunGrow vulnerabilities

  • 9.2 Critical severity

    iSolarCloud: Authentication Bypass Using an Alternate Path or Channel

    CVE-2026-107194SunGrow

    Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the user_account property is requir

  • 8.3 High severity

    iSolarCloud: Missing Authorization

    CVE-2025-29756SunGrow

    SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's web browser. The MQTT server however did not have sufficient restrictions in place to limit the topics th