Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2025-64125

Nuvation Energy nCloud Client-to-Client Communication

A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 (December, 2025). End users do not have to take any action to mitigate the issue.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Nuvation Energy
Products
Ncloud Vpn Service
CVE-2025-64119

Nuvation Energy BMS Client-side Authentication

A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery Management System: through 2.3.9.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Nuvation Energy
Products
Battery Management System
CVE-2025-64124

Nuvation Energy Multi-Stack Controller OS Command Injection

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before 2.5.1.

CVSS 4.0 · 8.7 High EPSS 1.0% KEV · Not listed
Vendors
Nuvation Energy Nuvationenergy
Products
Multi-stack Controller Nplatform Nuvmsc3-04s-c and 3 more
CVE-2025-64123

Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.

CVSS 4.0 · 7.9 High EPSS < 1% KEV · Not listed
Vendors
Nuvation Energy Nuvationenergy
Products
Multi-stack Controller Nplatform Nuvmsc3-04s-c and 3 more
CVE-2025-64121

Nuvation Energy Multi-Stack Controller Authentication Bypass

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Nuvation Energy Nuvationenergy
Products
Multi-stack Controller Nplatform Nuvmsc3-04s-c and 3 more
CVE-2025-64120

Nuvation Energy Multi-Stack Controller OS Command Injection

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.

CVSS 4.0 · 9.4 Critical EPSS 1.0% KEV · Not listed
Vendors
Nuvation Energy Nuvationenergy
Products
Multi-stack Controller Nplatform Nuvmsc3-04s-c and 3 more