CVE-2025-64125CWE-441
CVE-2025-64125
published January 3, 2026
What it is
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 (December, 2025). End users do not have to take any action to mitigate the issue.
The record
Technical detail
- CVSS
- 9.4 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00260 · 16.8th percentile
- Weakness
- CWE-441 · Unintended Proxy or Intermediary ('Confused Deputy')
- Published
- 2026-01-03T06:15Z
References (1)
EPSS history
Timeline