SolisCloud Monitoring Platform (Cloud API & Device Control API)
- CVE-2025-13932 The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any authenticated user can access detailed data of any plant by al 0.3%