Nuvationenergy Nplatform — known CVE vulnerabilities

Every CVE whose affected-product data names Nuvationenergy Nplatform, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-64121 — CVSS 9.8 (critical): Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows…
• CVE-2025-64123 — CVSS 9.8 (critical): Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue…
• CVE-2025-64120 — CVSS 8.8 (high): Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack…
• CVE-2025-64124 — CVSS 8.8 (high): Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack…
• CVE-2025-64122 — CVSS 5.5 (medium): Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key…