PatchTheCVE: nuvationenergyhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-64124: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuhttps://patchthecve.com/cve/CVE-2025-64124.htmlhttps://patchthecve.com/cve/CVE-2025-64124.htmlWed, 07 Oct 2026 11:10:00 +0000HIGH 8.8: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before 2.5.1.CVE-2025-64123: Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network https://patchthecve.com/cve/CVE-2025-64123.htmlhttps://patchthecve.com/cve/CVE-2025-64123.htmlWed, 07 Oct 2026 11:10:00 +0000CRITICAL 9.8: Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): through and including release 2.5.1.CVE-2025-64122: Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signhttps://patchthecve.com/cve/CVE-2025-64122.htmlhttps://patchthecve.com/cve/CVE-2025-64122.htmlWed, 07 Oct 2026 11:10:00 +0000MEDIUM 5.5: Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller (MSC): through 2.5.1.CVE-2025-64121: Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controllhttps://patchthecve.com/cve/CVE-2025-64121.htmlhttps://patchthecve.com/cve/CVE-2025-64121.htmlWed, 07 Oct 2026 11:10:00 +0000CRITICAL 9.8: Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.CVE-2025-64120: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuhttps://patchthecve.com/cve/CVE-2025-64120.htmlhttps://patchthecve.com/cve/CVE-2025-64120.htmlWed, 07 Oct 2026 11:10:00 +0000HIGH 8.8: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.