Nuvation Energy vulnerabilities
We track 5 vulnerabilities in Nuvation Energy products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on January 3, 2026.
Latest Nuvation Energy vulnerabilities
- 9.4 Critical severity
nCloud VPN Service: Unintended Proxy or Intermediary
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 (December, 2025). End users do not have to take any action to mitigate the issue.
- 8.8 High severity
Multi-Stack Controller (MSC): Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before 2.5.1.
- 9.8 Critical severity
Multi-Stack Controller (MSC): Unintended Proxy or Intermediary
Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.
- 9.8 Critical severity
Multi-Stack Controller (MSC): Authentication Bypass Using an Alternate Path or Channel
Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.
- 8.8 High severity
Multi-Stack Controller (MSC): Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.