Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Nuvation Energy Component: Nplatform Clear all filters
TI-2025-39575 CVE-2025-64124 · GHSA-9fpm-5f3v-gxp2

Nuvation Energy Multi-Stack Controller OS Command Injection

Priority MEDIUM 42

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controll…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0101 Published 2026-01-03 Fixed in 2.5.1 CWE-78
TI-2025-39574 CVE-2025-64123 · GHSA-rw75-27g5-4c67

Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access

Priority MEDIUM 40

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.

CVSS 4.0HIGH 7.9 Network No auth No interaction EPSS 0.00319 Published 2026-01-02 No fix listed CWE-441
TI-2025-39573 CVE-2025-64122 · GHSA-2hrm-3727-3mc5

Nuvation Energy Multi-Stack Controller Private Key Stored on Device

Priority LOW 30

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.

CVSS 4.0HIGH 7.2 Local No auth No interaction EPSS 0.00094 Published 2026-01-02 No fix listed CWE-522
TI-2025-39572 CVE-2025-64121 · GHSA-fwx4-5874-4gvg

Nuvation Energy Multi-Stack Controller Authentication Bypass

Priority MEDIUM 49

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00397 Published 2026-01-02 Fixed in 2.5.1 CWE-288
TI-2025-39571 CVE-2025-64120 · GHSA-v668-5qxg-qhjh

Nuvation Energy Multi-Stack Controller OS Command Injection

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controll…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.0101 Published 2026-01-02 Fixed in 2.5.1 CWE-78