<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: growatt-shinelan-x</title><description>Every new CVE for growatt-shinelan-x.</description><link>https://agentprime.io/</link><item><title>CVE-2025-36747: Hardcoded FTP Credentials within the firmware</title><link>https://agentprime.io/advisories/CVE-2025-36747/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-36747/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 13 Dec 2025 08:16:25 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-36752: Undocumented backup Account and No Password Configuration Capability</title><link>https://agentprime.io/advisories/CVE-2025-36752/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-36752/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 13 Dec 2025 08:16:25 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-36754: Authentication bypass on web interface</title><link>https://agentprime.io/advisories/CVE-2025-36754/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-36754/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 13 Dec 2025 08:16:24 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-36748: Stored Cross-Site Scripting (XSS) vulnerability in Growatt ShineLan-X</title><link>https://agentprime.io/advisories/CVE-2025-36748/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-36748/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 13 Dec 2025 08:16:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-36750: Stored cross site scripting (XSS) vulnerability in Growatt ShineLan-X</title><link>https://agentprime.io/advisories/CVE-2025-36750/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-36750/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 13 Dec 2025 08:16:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-36753: SWD Interface Open on Growatt ShineLan-X</title><link>https://agentprime.io/advisories/CVE-2025-36753/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-36753/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 13 Dec 2025 08:16:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-36751: Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X</title><link>https://agentprime.io/advisories/CVE-2025-36751/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-36751/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 13 Dec 2025 08:16:21 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>