← Database

CVE-2024-50686

CRITICAL CVSS: 9.1 Published: 2025-02-26 Modified: 2026-06-17

Description

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references (IDOR) via the commonService API model.

Affected Platforms

Sungrowpower Isolarcloud

Weakness Type

CWE-639

References