Skip to content
Energizelab vulnerabilities
Newest
-
energizelab nestjs auth service
EnergizeLab Eilik User-ID Mass Assignment Account Takeover
CVE-2026-105040
8.8 High
-
energizelab station-middleware
EnergizeLab Station Middleware Admin APIs Missing Role Checks
CVE-2026-105039
9.6 Critical
-
energizelab fastapi ai inference server
EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching
CVE-2026-105038
9.8 Critical
-
energizelab station-middleware
EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read
CVE-2026-105037
9.9 Critical
-
energizelab ai station firmware (rk3562), robot firmware (mode 104000), windows desktop app (energizelabsetup-3.1.2-win.exe) +2 more
EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks
CVE-2026-105036
7.5 High
-
energizelab firmwareupdater
EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key
CVE-2026-105035
7.8 High
-
energizelab nestjs auth service
EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers
CVE-2026-105034
8.2 High
-
energizelab ai station firmware (rk3562)
EnergizeLab AI Station Default Root Credentials with SSH Enabled
CVE-2026-105033
8.8 High
-
energizelab fastapi ai inference server
EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write
CVE-2026-105032
9.1 Critical