CVE-2025-36746: Solaredge Monitoring Platform

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s browser during a deletion attempt.

Affected products

• Solaredge Solaredge Monitoring Platform: affected versions not specified

Published 2025-12-12. Last modified 2026-10-07.