CVE-2025-64119CWE-603

CVE-2025-64119

published January 3, 2026

CVSS

9.3

EPSS

0%

Percentile

38.7

In the wild

Unconfirmed

What it is

A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery Management System: through 2.3.9.

The record

Technical detail

CVSS: 9.3 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00457 · 38.7th percentile
Weakness: CWE-603 · Use of Client-Side Authentication
Published: 2026-01-03T03:15Z

References (1)

https://www.dragos.com/community/advisories/CVE-2025-64119 · [email protected]

EPSS history

Timeline

02 JAN 21:26Z
Nuvation Energy BMS Client-side Authentication
cvelistv5