CVE-2026-107194
— UNSCOREDPublished 2026-10-07 · Updated 2026-10-10
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Sungrow iSolarCloud before 2026 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the user_account property is required; however, a user can view the email address associated with their parent organization.
Weaknesses
CWE-288
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100261
- MEDIUMCVE-2026-100518
- CRITICALCVE-2026-104075
- MEDIUMCVE-2026-106601
- MEDIUMCVE-2026-106602
- MEDIUMCVE-2026-107361PoC
- CRITICALCVE-2026-110130PoC
- UNSCOREDCVE-2026-110852PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.