CVE-2025-64121

CRITICAL · 9.8 CVSS Gepubliceerd: 02-01-2026 CWE-288

Beschrijving

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.

Vendors

Nuvationenergy

Affected products

Nplatform Nuvmsc3-04s-c Nuvmsc3-08s-c Nuvmsc3-12s-c Nuvmsc3-16s-c

References

www.dragos.com