CVE-2025-15574

When connecting to the Solax Cloud MQTT server the username is the "registration number", which is the 10 character string printed on the SolaX Power Pocket device / the QR code on the device. The password is derived from the "registration number" using a proprietary XOR/transposition algorithm. Attackers with the knowledge of the registration numbers can connect to the MQTT server and impersonate the dongle / inverters.

• CWE-330

• https://r.sec-consult.com/solax

Published

Feb 12, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15569A flaw has been found in Artifex MuPDF up to 1.26.1 on Windo…7.3
• CVE-2025-1557A vulnerability, which was classified as problematic, was fo…5.3
• CVE-2025-15570A vulnerability was found in ckolivas lrzip up to 0.651. Thi…7.8
• CVE-2025-15571A security vulnerability has been detected in ckolivas lrzip…5.5
• CVE-2025-15572A vulnerability has been found in wasm3 up to 0.5.0. The aff…5.5
• CVE-2025-15573The affected devices do not validate the server certificate …9.4
• CVE-2025-15575The firmware update functionality does not verify the authen…5.3
• CVE-2025-15576If two sibling jails are restricted to separate filesystem t…7.5
• CVE-2025-15577An unauthenticated attacker can exploit this vulnerability b…7.5
• CVE-2025-15578Maypole versions from 2.10 through 2.13 for Perl generates s…9.8
• CVE-2025-15579Deserialization of Untrusted Data vulnerability in OpenText™…9.5
• CVE-2025-1558Mattermost Mobile Apps versions <=2.25.0 fail to properly va…6.5