Medium severity5.4NVD Advisory· Published Dec 12, 2025· Updated Jun 17, 2026
CVE-2025-36746
CVE-2025-36746
Description
SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt.
Affected products
3cpe:2.3:a:solaredge:solaredge_monitoring_platform:-:*:*:*:*:saas:*:*+ 2 more
- cpe:2.3:a:solaredge:solaredge_monitoring_platform:-:*:*:*:*:saas:*:*
- (no CPE)
- (no CPE)range: unkown
Patches
Vulnerability mechanics
References
2- csirt.divd.nl/CVE-2025-36746nvdThird Party Advisory
- csirt.divd.nl/DIVD-2025-00022/nvdBroken Link
News mentions
0No linked articles in our index yet.