Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The affected devices do not validate the server certificate when connecting to the SolaX Cloud MQTTS server hosted in the Alibaba Cloud (mqtt001.solaxcloud.com, TCP 8883). This allows attackers in a man-in-the-middle position to act as the legitimate MQTT server and issue arbitrary commands to devices.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-12 | 6 | Disclosure5General1 |
| 2026-02-13 | 1 | General1 |
| 2026-03-20 | 1 | General1 |
@rangeva @VulmonFeeds No patches or exploits in the wild are detailed beyond the advisory, and this is separate from similar issues like CVE-2025-15573 in SolaX devices. #StaySafe #CyberAwareness
Post summary
The statement confirms that no patches or exploits are known and that the issue is distinct from a similar CVE, but provides no further technical or exploitation details.
There was a notable authentication bypass and certificate validation failure impacting SolaX Cloud MQTT devices (CVE-2025-15573, CVE-2025-15574) recently that might be fun to explore. Iran also recently put a lot of money into Solar stuff with a 200 MW plant in Yazd and a 500 MW hybrid solar-hydro plant at Karkheh River. It's likely affected and been hard for them to get out there to patch for it.. 🤔
Post summary
The text mentions authentication bypass and certificate validation failure in SolaX Cloud MQTT devices but provides no proof‑of‑concept, exploit, or patch details.
CVE-2025-15573~5が公開されたけど、SolaX杜撰すぎんかこれ 太陽光パネル用のWi-Fiモジュールということで誰も攻撃してこんだろうとセキュリティが後回しになった結果かな
Post summary
The post merely names the CVE and laments the lack of security attention, providing no technical or exploitation details.
[CVE-2025-15573: CRITICAL] Devices connecting to SolaX Cloud MQTTS server do not validate certificates, allowing attackers to pose as the server and issue malicious commands. Be cautious of such vulnerabilit...#cve,CVE-2025-15573,#cybersecurity https://cvefind.com/CVE-2025-15573
Post summary
The CVE discloses that SolaX Cloud MQTTS servers lack certificate validation, allowing man‑in‑the‑middle attacks and malicious command execution. No PoC, patch, or evidence of active exploitation is included.
🔴 CVE-2025-15573 - Critical The affected devices do not validate the server certificate when connecting to the SolaX Cloud MQTTS server hosted in the Alibaba Cloud (http://mqtt001.solaxcloud.com, TCP 8883). This allows att... https://www.thehackerwire.com/vulnerability/CVE-2025-15573/ https://t.co/0KzCCUfIVk
Post summary
The tweet announces CVE-2025-15573, highlighting a certificate validation flaw in SolaX Cloud MQTTS connections, but does not provide exploit details, patches, or evidence of active exploitation.
CVE-2025-15573 SolaX Cloud MQTTS Server Certificate Validation Vulnerability in IoT Devices https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15573
Post summary
The text announces CVE-2025-15573, a certificate validation flaw in SolaX Cloud MQTTS servers for IoT devices, with no PoC, exploit, or patch details provided.
CVE-2025-15573 The affected devices do not validate the server certificate when connecting to the SolaX Cloud MQTTS server hosted in the Alibaba Cloud (http://mqtt001.solaxcloud.com, TCP 8… https://www.cve.org/CVERecord?id=CVE-2025-15573
Post summary
CVE-2025-15573 highlights that SolaX devices fail to validate the server certificate for MQTTS connections, pointing to a potential SSL/TLS trust flaw.
CVE-2025-15573, CVE-2025-15574, CVE-2025-15575 Multiple Vulnerabilities in various Solax Power Pocket WiFi models - SEC Consult https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-various-solax-power-pocket-wifi-models/
Post summary
SEC Consult has disclosed multiple vulnerabilities affecting Solax Power Pocket WiFi models, identified as CVE-2025-15573, CVE-2025-15574, and CVE-2025-15575. No additional details regarding exploitation, patches, or technical specifics are provided in the text.