Multi-Stack Controller (MSC) vulnerabilities

4 known vulnerabilities in Multi-Stack Controller (MSC) from Nuvation Energy. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Multi-Stack Controller (MSC): Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-64124Jan 3, 2026Nuvation EnergyEPSS 1.01%

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before 2.5.1.

• 9.8 Critical severity

  Multi-Stack Controller (MSC): Unintended Proxy or Intermediary

  CVE-2025-64123Jan 2, 2026Nuvation Energy

  Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.

• 9.8 Critical severity

  Multi-Stack Controller (MSC): Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-64121Jan 2, 2026Nuvation Energy

  Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.

• 8.8 High severity

  Multi-Stack Controller (MSC): Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-64120Jan 2, 2026Nuvation EnergyEPSS 1.01%

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.