Vulnerabilities in SunGrow

3 results

CVE-2026-107194CRITICALSungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentiallyEPSS 0.4%CVE-2025-4534MEDIUMSunGrow Logger1000 weak passwordEPSS 0.4%CVE-2025-29756HIGHMQTT implementation in Sungrow iSolarCloud allowed users to subscribe to all data of all connected invertersEPSS 0.3%