grep -rl "CVE-2026-107194" ./articles
Sungrow's iSolarCloud accepted a login request with login_type set to 5 and authenticated whoever the request named, ignoring the password. All four regional clouds were affected, no notification was sent, and the researcher's own line about continent-wide blackouts has been quoted into the official CVE description.
Root Notes reports on this identifier; it does not maintain it. For the vendor advisory, the affected versions and the scoring, NVD and MITRE hold the primary records.
Not listed in CISA's Known Exploited Vulnerabilities catalog as of catalog 2026.11.06. That is not evidence it is not being exploited — the catalog records what CISA has confirmed, and identifiers have been attacked for days before appearing in it.
Sungrow's iSolarCloud accepted a login request with login_type set to 5 and authenticated whoever the request named, ignoring the password. All four regional clouds were affected, no notification was sent, and the researcher's own line about continent-wide blackouts has been quoted into the official CVE description.
../cve — every identifier we have covered