Nuvation Energy CVE-2025-64125

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441)

2026-01-03 ot-cert@dragos.com

Information Disclosure

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 03, 2026 - 01:15 nvd

N/A

DescriptionCVE.org

A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 (December, 2025). End users do not have to take any action to mitigate the issue.

Analysis

Technical ContextAI

Affected ProductsAI

Component: Nuvation Energy nCloud VPN.

RemediationAI

Monitor vendor advisories for a patch.

Same weakness CWE-441 – Unintended Proxy or Intermediary ('Confused Deputy')

View all

CVE-2019-3924 HIGH POC

7.5

CVE-2020-5412 MEDIUM POC

6.5

CVE-2019-3996 MEDIUM POC

6.5

CVE-2025-62718 MEDIUM POC

6.3

CVE-2025-64123 CRITICAL

9.8

CVE-2021-20042 CRITICAL

9.8

CVE-2026-6993 MEDIUM POC

5.5

CVE-2015-2947 CRITICAL

9.1

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2025-64125 vulnerability details – vuln.today

Back