Authentication Bypass in Sungrow iSolarCloud by Sungrow

CVE-2026-107194

What is CVE-2026-107194?

The Sungrow iSolarCloud platform is affected by a significant authentication bypass vulnerability that allows unauthorized access to user accounts. This security flaw is triggered through a specific login request parameter, enabling potential attackers to exploit the system. Once compromised, this vulnerability could lead to severe operational impacts, including disruptions in solar energy operations that might affect entire regions, particularly in Europe, as users may gain access to sensitive account information such as email addresses linked to organizational accounts. Organizations using iSolarCloud should take immediate steps to mitigate this risk.

References