Growatt vulnerabilities

Products

• Cloud Portal 30
• Cloud Portal 30
• Shinelan-x 7
• Shine Lan-x Firmware 5

Newest

• growatt shinelan-x, shine lan-x firmware +1 more Undocumented backup Account and No Password Configuration Capability CVE-2025-36752 9.4 CriticalDecember 13, 2025
• growatt shinelan-x, shine lan-x firmware +1 more Hardcoded FTP Credentials within the firmware CVE-2025-36747 9.4 CriticalDecember 13, 2025
• growatt shinelan-x Authentication bypass on web interface CVE-2025-36754 9.3 CriticalDecember 13, 2025
• growatt shinelan-x, shine lan-x firmware +1 more Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-X CVE-2025-36748 8.4 HighDecember 13, 2025
• growatt shinelan-x, shine lan-x firmware +1 more SWD Interface Open on Growatt ShineLan-X CVE-2025-36753 8.6 HighDecember 13, 2025
• growatt shinelan-x, shine lan-x firmware +1 more Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-X CVE-2025-36750 8.5 HighDecember 13, 2025
• growatt shinelan-x Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X CVE-2025-36751 9.4 CriticalDecember 13, 2025
• growatt https://oss.growatt.com, https://server.growatt.com +1 more An incorrect authorisation check in the the 'plant transfer' function of the Growatt cloud... CVE-2025-29757 9.4 CriticalJuly 19, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-27929 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-24315 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-27561 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-30257 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-31147 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-31360 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal External Control of System or Configuration Setting CVE-2025-30512 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-27927 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Cross-site Scripting CVE-2025-24297 9.3 CriticalApril 15, 2025
• growatt cloud portal Growatt Cloud portal Insufficient Type Distinction CVE-2025-30510 9.3 CriticalApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-24850 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-25276 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-27565 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-27575 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-31950 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-31945 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-26857 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-27719 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-31654 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-30514 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-27938 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-27939 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-30254 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-27568 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-24487 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-31941 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-31357 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud portal Authorization Bypass Through User-Controlled Key CVE-2025-31949 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud Applications Authorization Bypass Through User-Controlled Key CVE-2025-31933 6.9 MediumApril 15, 2025
• growatt cloud portal Growatt Cloud Applications Cross-site Scripting CVE-2025-30511 8.7 HighApril 15, 2025