Nuvation Energy
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Multi-Stack Controller (MSC) | 5 | – | Jan 3, 2026 |
| Battery Management System | 1 | – | Jan 2, 2026 |
| nCloud VPN Service | 1 | – | Jan 3, 2026 |
Exploited and recent CVEs
- CVE-2025-64124 Nuvation Energy Multi-Stack Controller OS Command Injection 1.0%
- CVE-2025-64125 Nuvation Energy nCloud Client-to-Client Communication 0.3%
- CVE-2025-64123 Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access 0.3%
- CVE-2025-64122 Nuvation Energy Multi-Stack Controller Private Key Stored on Device <0.1%
- CVE-2025-64121 Nuvation Energy Multi-Stack Controller Authentication Bypass 0.4%
- CVE-2025-64120 Nuvation Energy Multi-Stack Controller OS Command Injection 1.0%
- CVE-2025-64119 Nuvation Energy BMS Client-side Authentication 0.5%