ExploitPublished 21 May 2026

solaredge - (CSRF-OOB-Injection)

Affects SolarEdge Monitoring Platform – Framework /solaredge-webSource Exploit-DB RSS Feed

Severity

Medium

Rated by Threat Radar

Data as of 18 Jun 2026, 21:48 UTC

What to do

AI-suggested

Users should monitor SolarEdge advisories for updates and apply any official patches once available.

Description

solaredge - (CSRF-OOB-Injection)

Impact

The vulnerability could allow an attacker to perform unauthorized actions on behalf of a legitimate user via CSRF combined with out-of-band injection. Specific impacts are not detailed in the provided information. There is no indication of active exploitation in the wild.

Summary

This threat concerns a CSRF-OOB injection vulnerability in the SolarEdge Monitoring Platform framework (/solaredge-web). The exploit leverages CSRF techniques combined with out-of-band injection to potentially manipulate the platform. The available data does not specify affected versions or detailed impact vectors. Exploit code is publicly available in text format via Exploit-DB entry 52569.

Indicators of compromise

Exploit source code

Exploit code for solaredge - (CSRF-OOB-Injection)7,410 characters

# Titles: solaredge - (CSRF-OOB-Injection)
# Author: nu11secur1tyAI
# Date: 2026-04-26
# Vendor: SolarEdge Technologies Ltd.
# Software: SolarEdge Monitoring Platform - Framework /solaredge-web/
# Reference: https://monitoring.solaredge.com/

## Description:
The solaredge-CSRF-Hijack vulnerability arises due to a critical business
logic flaw in the `/solaredge-web/p/initClient` endpoint. The system allows
the generation and overwriting of session parameters (`createCookie`) via
POST requests tha…

References

exploit-db.com/exploits/52569 (opens in a new tab)

Community reviews

Loading reviews…