Skip to content

CyberSecBulletin

CVEs published on January 3, 2026

2 vulnerabilities, ordered with the most urgent first.

9.4 Critical severity
nCloud VPN Service: Unintended Proxy or Intermediary
CVE-2025-64125Jan 3, 2026Nuvation Energy
8.8 High severity
Multi-Stack Controller (MSC): Improper Neutralization of Special Elements used in an OS Command
CVE-2025-64124Jan 3, 2026Nuvation EnergyEPSS 1.01%