CVE-2025-64121

Critical · CVSS 9.8

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: closed appliance; CWE-288

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.

References

https://www.dragos.com/community/advisories/CVE-2025-64119

Status: profiled · ingested 2026-10-07T12:00:43.000Z