CVE-2026-107194Critical 9.2Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Euro0.4%
CVE-2025-29756High 8.3MQTT implementation in Sungrow iSolarCloud allowed users to subscribe to all data of all connected inverters0.3%