EnergizeLab vulnerabilities
9 published CVEs name EnergizeLab among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 4Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-105040
EnergizeLab Eilik User-ID Mass Assignment Account Takeover
EnergizeLab · NestJS auth service
High8.8 - CVE-2026-105039
EnergizeLab Station Middleware Admin APIs Missing Role Checks
EnergizeLab · station-middleware
Critical9.6 - CVE-2026-105038
EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching
EnergizeLab · FastAPI AI inference server
Critical9.8 - CVE-2026-105037
EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read
EnergizeLab · station-middleware
Critical9.9 - CVE-2026-105036
EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks
EnergizeLab · Robot firmware (mode 104000)
High7.5 - CVE-2026-105035
EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key
EnergizeLab · FirmwareUpdater
High7.8 - CVE-2026-105034
EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers
EnergizeLab · NestJS auth service
High8.2 - CVE-2026-105033
EnergizeLab AI Station Default Root Credentials with SSH Enabled
EnergizeLab · AI Station firmware (RK3562)
High8.8 - CVE-2026-105032
EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write
EnergizeLab · FastAPI AI inference server
Critical9.1