Nuvation Energy

Products

ProductCVEsExploitedLatest
Multi-Stack Controller (MSC)5–Jan 3, 2026
Battery Management System1–Jan 2, 2026
nCloud VPN Service1–Jan 3, 2026

Exploited and recent CVEs

  • CVE-2025-64124 High 8.7 Nuvation Energy Multi-Stack Controller OS Command Injection 1.0%
  • CVE-2025-64125 Critical 9.4 Nuvation Energy nCloud Client-to-Client Communication 0.3%
  • CVE-2025-64123 High 7.9 Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access 0.3%
  • CVE-2025-64122 High 7.2 Nuvation Energy Multi-Stack Controller Private Key Stored on Device <0.1%
  • CVE-2025-64121 Critical 10.0 Nuvation Energy Multi-Stack Controller Authentication Bypass 0.4%
  • CVE-2025-64120 Critical 9.4 Nuvation Energy Multi-Stack Controller OS Command Injection 1.0%
  • CVE-2025-64119 Critical 9.3 Nuvation Energy BMS Client-side Authentication 0.5%