CVE-2025-64120

HIGH 8.8CVE-2025-64120 · Published 02/01/2026 · updated 07/10/2026

In short

CVE-2025-64120 is a HIGH (CVSS 8.8) vulnerability affecting nplatform (nuvationenergy).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.1% of all vulnerabilities.
Fix: update to 2.5.1 or later.

Package	Affected versions	Patched versions
nplatform nuvationenergy	`≥ 2.3.8, < 2.5.1`	`2.5.1`

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): from 2.3.8 before 2.5.1.

References

dragos.com/community/advisories/CVE-2025-64119 · Third Party Advisory

More vulnerabilities in nplatform

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free