CVE-2026-107194 | Sungrow iSolarCloud prior 2026 user_account improper authentication

October 7, 2026 Yanac

A vulnerability was found in Sungrow iSolarCloud. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument user_account results in improper authentication.

This vulnerability was named CVE-2026-107194. The attack may be performed from remote. There is no available exploit.

This product is a managed service, so users are unable to manage vulnerability countermeasures on their own. It is recommended to upgrade the affected component.VulDB Recent EntriesRead More