Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2025-64124

Nuvation Energy Multi-Stack Controller OS Command Injection

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before 2.5.1.

CVSS 4.0 · 8.7 High EPSS 1.0% KEV · Not listed
Vendors
Nuvation Energy Nuvationenergy
Products
Multi-stack Controller Nplatform Nuvmsc3-04s-c and 3 more
CVE-2025-64123

Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.

CVSS 4.0 · 7.9 High EPSS < 1% KEV · Not listed
Vendors
Nuvation Energy Nuvationenergy
Products
Multi-stack Controller Nplatform Nuvmsc3-04s-c and 3 more
CVE-2025-64121

Nuvation Energy Multi-Stack Controller Authentication Bypass

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Nuvation Energy Nuvationenergy
Products
Multi-stack Controller Nplatform Nuvmsc3-04s-c and 3 more
CVE-2025-64120

Nuvation Energy Multi-Stack Controller OS Command Injection

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.

CVSS 4.0 · 9.4 Critical EPSS 1.0% KEV · Not listed
Vendors
Nuvation Energy Nuvationenergy
Products
Multi-stack Controller Nplatform Nuvmsc3-04s-c and 3 more