medium5.3
CVE-2025-26857
Unauthenticated attackers can rename arbitrary devices of arbitrary users (i.e., EV chargers).
Impact
Unauthenticated attackers can rename arbitrary devices of arbitrary users (i.e., EV chargers).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Growatt | Cloud Portal | through 3.6.0 |