Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-64119 EUVD-2025-206227GHSA-757q-w8xv-793g

Nuvation Energy BMS Client-side Authentication

Published Jan 2, 2026 · Updated Jan 5, 2026 · Assigned by Dragos

Description

A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery Management System: through 2.3.9.

Affected products

VendorProductAffectedFixed
Nuvation Energy Battery Management System ≤ 2.3.9 —

References