SunGrow iSolarCloud

• CVE-2026-107194 Critical 9.2 Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Euro 0.4%
• CVE-2025-29756 High 8.3 MQTT implementation in Sungrow iSolarCloud allowed users to subscribe to all data of all connected inverters 0.3%