CVE-2025-36746

SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - csirt@divd.nl

Published

2025-12-12

Last modified

2026-10-07

Weaknesses

CWE-79

Affected products

• Solaredge Monitoring Platform (Solaredge)
• Solaredge Monitoring Platform Saas (Solaredge)

References

• https://csirt.divd.nl/CVE-2025-36746
• https://csirt.divd.nl/DIVD-2025-00022/