Advisories · Technology

SolaX Power Pocket WiFi 4.0.

Every CVE that names SolaX Power Pocket WiFi 4.0 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-15574 CVE record

CVSS 6.5 Medium

Insecure Credential Generation for Solax Power Pocket WiFi models MQTT Cloud Connection
- SolaX Power Pocket WiFi 3.0
- SolaX Power Pocket WiFi+LAN
- Weak cryptography or TLS
Not analysed yet 12 Feb 2026
CVE-2025-15575 CVE record

CVSS 5.3 Medium

Missing Firmware Authenticity Checks in Solax Power Pocket WiFi models
- SolaX Power Pocket WiFi 3.0
- SolaX Power Pocket WiFi+LAN
- CWE-494
Not analysed yet 12 Feb 2026
CVE-2025-15573 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Missing Certificate Validation for Solax Power Pocket WiFi models MQTT Cloud Connection
- SolaX Power Pocket WiFi 3.0
- SolaX Power Pocket WiFi+LAN
- Weak cryptography or TLS
Not analysed yet 12 Feb 2026