CVE-2025-36744

Low · 2.4

CVSS

2.4

EPSS

0.2%

Published

Dec 12, 2025

CISA due date

—

The record

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information.

Affected packages

Ecosystem	Package	Introduced	Fixed