Critical Sungrow Inverter Vulnerability Lets Attackers Access Solar Plants Without Passwords

Cybersecuritynews •Guru Baran • October 8, 2026

A critical Sungrow inverter vulnerability could have allowed attackers to log in to the company’s iSolarCloud management platform without a valid password. The flaw affected the cloud service used to manage solar plants, inverters, and battery storage systems, creating a serious risk for customers and energy operators in Europe, China, Australia, and other regions. Sungrow […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Sungrow Patches Critical iSolarCloud Vulnerability Exposing Solar Plants Sungrow has patched a critical vulnerability in its iSolarCloud platform that allowed unauthorized access to accounts without authentication. The flaw, reported by Jakkaru on August 22, affected the cloud service managing solar plants, inverters, and battery storage systems globally. Sungrow deployed an emergency patch on August 25, and follow-up tests confirmed the vulnerability was no longer exploitable. The vulnerability posed a risk to customers and energy operators in regions including Europe, China, and Australia. Sungrow's investigation revealed no evidence of exploitation beyond the reporting researcher, and it has committed to further security assessments. Jakkaru noted that similar vulnerabilities could exist in other inverter manufacturers' systems. 2 sources 58

Extracted Entities

Critical Sungrow Inverter Vulnerability Lets Attackers Access Solar Plants Without Passwords

The full story

Extracted Entities

Companies (1)

Countries (2)

CWE Weaknesses (1)

Industries (1)

Platforms (1)