Daily digest
Saturday 3 January 2026
A quiet day: only 2 new CVEs against a recent average of about 30. Severity skewed high: 1 high, 50% of the total.
2
New CVEs
0
Critical
0
KEV additions
0
Records changed
New this day, ranked by depth score
The 2 that matter most of the 2 published.
CVE-2025-64124High· 8.8Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before …
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command Injection.This issue affects Multi-Stack Controller (MSC): before …
▾ Twilightnuvationenergy · nplatformEPSS 1.0%via NVD
CVE-2025-64125NoneA vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 (December, 2025)
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 (December, 2025). End users do not have to take any action to mitigate the issue.
▾ SunlitEPSS 0.26%via NVD
Most-affected vendors
By CVEs published in the period.