SolarEdge manufactures solar inverter hardware and cloud-based energy-monitoring platforms, with a narrow but strategically deployed product focus spanning inverter firmware, the MysolaredEdge portal, and monitoring infrastructure. Observed vulnerability disclosures cluster around web-application and firmware-level input handling, including cross-site scripting and out-of-bounds read conditions that are characteristic of interconnected energy-management systems. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Solaredge over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-36745HIGH SolarEdge SE3680H ships with an outdated Linux kernel containing unpatched vulnerabilities in core subsystems. An attacker with network or local access can exploit these flaws to | Dec 12, 2025 | 7.8 | 26 | NO | NO |
CVE-2025-36743MEDIUM SolarEdge SE3680H has an exposed debug/test interface accessible to unauthenticated actors, allowing disclosure of system internals and execution of debug commands. | Dec 12, 2025 | 6.8 | 23 | NO | NO |
CVE-2025-36746MEDIUM SolarEdge monitoring platform contains a Cross‑Site Scripting (XSS) flaw that allows an authenticated user to inject payloads into report names, which may execute in a victim’s bro | Dec 12, 2025 | 5.4 | 20 | NO | NO |
CVE-2024-28756MEDIUM The SolarEdge mySolarEdge application before 2.20.1 for Android has a certificate verification issue that allows a Machine-in-the-middle (MitM) attacker to read and alter all netwo | Mar 21, 2024 | 5.9 | 18 | NO | NO |
SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the b | Dec 12, 2025 | 2.4 | 15 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Solaredge.
Media articles that mention a CVE ID that affects a product developed by Solaredge — matched by CVE ID, not by vendor name.