CVE-2025-64125
Critical
Description
A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 (December, 2025). End users do not have to take any action to mitigate the issue.
SeverityCritical
CVSS9.4
Exploit probability—
ProductnCloud VPN Service
PublishedJan 3, 2026
First seenJan 3, 2026
Weakness typeCWE-441CWE-441
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Nuvation Energy nCloud VPN Service | 2025-12-1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.