CVE-2025-64125

CriticalCVSS 9.4/10Last modified Oct 7, 2026

Description

A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 (December, 2025). End users do not have to take any action to mitigate the issue.

Metrics

CVSS 4.0 9.4/10CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-441

Affected software

VendorProductVersions
Nuvation EnergynCloud VPN Service2025-12-1

References

Timeline

Published
Jan 3, 2026
Last modified
Oct 7, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-6412610.0An OS command injection vulnerability exists due to improper input validation. The application accepts a parameter directly from user inputCVE-2025-6412710.0An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters tCVE-2025-6412810.0An OS command injection vulnerability exists due to incomplete validation of user-supplied input. Validation fails to enforce sufficient fCVE-2025-641297.6Zenitel TCIV-3+ is vulnerable to an out-of-bounds write vulnerability, which could allow a remote attacker to crash the device.CVE-2025-64138.8A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.1. This affects an unknown part of the fCVE-2025-641309.8Zenitel TCIV-3+ is vulnerable to a reflected cross-site scripting vulnerability, which could allow a remote attacker to execute arbitrary CVE-2025-641317.5Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about CVE-2025-641325.4Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in multiple MCP tools, allowing attackers to trCVE-2025-641335.4A cross-site request forgery (CSRF) vulnerability in Jenkins Extensible Choice Parameter Plugin 239.v5f5c278708cf and earlier allows attackeCVE-2025-641347.1Jenkins JDepend Plugin 1.3.1 and earlier includes an outdated version of JDepend Maven Plugin that does not configure its XML parser to prevCVE-2025-641355.9Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb_8 and earlier sets the Java system property `jdk.http.auth.tunneling.disabledSchemes` CVE-2025-641364.3A cross-site request forgery (CSRF) vulnerability in Jenkins Themis Plugin 1.4.1 and earlier allows attackers to connect to an attacker-spec
CVE-2025-64125: Critical severity, CVSS 9.4 | Vulnix