CVE-2025-64123

Name of the Vulnerable Software and Affected Versions Nuvation Energy Multi-Stack Controller (MSC) versions through 2.5.1 Nuvation Energy nCloud VPN Service (affected versions not specified)

Description An issue involving Network Boundary Bridging exists in Nuvation Energy nCloud VPN Service and Multi-Stack Controller (MSC). This allows for unintended proxy or intermediary behavior. The nCloud VPN Service issue was resolved on December 1, 2025, and no action is required from end users.

Recommendations Versions of Nuvation Energy Multi-Stack Controller (MSC) prior to and including 2.5.1 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.