CVE-2025-64120

HIGH · 8.8 CVSS Gepubliceerd: 02-01-2026 CWE-78

Beschrijving

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.

Vendors

Nuvationenergy

Affected products

Nplatform Nuvmsc3-04s-c Nuvmsc3-08s-c Nuvmsc3-12s-c Nuvmsc3-16s-c

References

www.dragos.com