Read the docs

Nuvation Energy

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Nuvation Energy records in CISA KEV

No Nuvation Energy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nplatform 5 records MEDIUM

Records

5 records in Nplatform · all components

TI-2025-39572 CVE-2025-64121 · GHSA-fwx4-5874-4gvg

Nuvation Energy Multi-Stack Controller Authentication Bypass

Priority MEDIUM 49

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00397 Published 2026-01-02 Fixed in 2.5.1 CWE-288
TI-2025-39571 CVE-2025-64120 · GHSA-v668-5qxg-qhjh

Nuvation Energy Multi-Stack Controller OS Command Injection

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controll…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.0101 Published 2026-01-02 Fixed in 2.5.1 CWE-78
TI-2025-39575 CVE-2025-64124 · GHSA-9fpm-5f3v-gxp2

Nuvation Energy Multi-Stack Controller OS Command Injection

Priority MEDIUM 42

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controll…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0101 Published 2026-01-03 Fixed in 2.5.1 CWE-78
TI-2025-39574 CVE-2025-64123 · GHSA-rw75-27g5-4c67

Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access

Priority MEDIUM 40

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.

CVSS 4.0HIGH 7.9 Network No auth No interaction EPSS 0.00319 Published 2026-01-02 No fix listed CWE-441
TI-2025-39573 CVE-2025-64122 · GHSA-2hrm-3727-3mc5

Nuvation Energy Multi-Stack Controller Private Key Stored on Device

Priority LOW 30

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.

CVSS 4.0HIGH 7.2 Local No auth No interaction EPSS 0.00094 Published 2026-01-02 No fix listed CWE-522
Open these records in search →