CVE-2025-64120 | Nuvation Energy Multi-Stack Controller up to 2.5.0 os command injection

January 2, 2026 Yanac

A vulnerability identified as critical has been detected in Nuvation Energy Multi-Stack Controller up to 2.5.0. This issue affects some unknown processing. Performing manipulation results in os command injection.

This vulnerability was named CVE-2025-64120. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More