Unrated severityNVD Advisory· Published Jan 3, 2026· Updated Jan 5, 2026
Nuvation Energy Multi-Stack Controller OS Command Injection
CVE-2025-64124
Description
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before 2.5.1.
Affected products
2<2.5.1+ 1 more
- (no CPE)range: <2.5.1
- (no CPE)range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.