Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

EnergizeLab vulnerabilities

9 published CVEs name EnergizeLab among the affected products.

All 9 in the listAtom feed of new CVEs
Published CVEs
9
Last 12 months
9
Critical
4
Known exploited
0

Critical 4High 5Medium 0Low 0Not scored 0

Newest CVEs

  • CVE-2026-105040

    EnergizeLab Eilik User-ID Mass Assignment Account Takeover

    EnergizeLab · NestJS auth service

    High8.8
  • CVE-2026-105039

    EnergizeLab Station Middleware Admin APIs Missing Role Checks

    EnergizeLab · station-middleware

    Critical9.6
  • CVE-2026-105038

    EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching

    EnergizeLab · FastAPI AI inference server

    Critical9.8
  • CVE-2026-105037

    EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read

    EnergizeLab · station-middleware

    Critical9.9
  • CVE-2026-105036

    EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks

    EnergizeLab · Robot firmware (mode 104000)

    High7.5
  • CVE-2026-105035

    EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key

    EnergizeLab · FirmwareUpdater

    High7.8
  • CVE-2026-105034

    EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers

    EnergizeLab · NestJS auth service

    High8.2
  • CVE-2026-105033

    EnergizeLab AI Station Default Root Credentials with SSH Enabled

    EnergizeLab · AI Station firmware (RK3562)

    High8.8
  • CVE-2026-105032

    EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write

    EnergizeLab · FastAPI AI inference server

    Critical9.1

Products with the most CVEs

  1. AI Station firmware (RK3562)2
  2. FastAPI AI inference server2
  3. NestJS auth service2
  4. station-middleware2
  5. FirmwareUpdater1
  6. Robot firmware (mode 104000)1
  7. Windows desktop app (EnergizeLabSetup-3.1.2-Win.exe)1

Most common weaknesses

  1. CWE-306 Missing authentication for a critical function2
  2. CWE-22 Path traversal1
  3. CWE-287 Improper authentication1
  4. CWE-321 1
  5. CWE-434 Unrestricted file upload1
  6. CWE-494 1
  7. CWE-639 Authorization bypass through a user-controlled key (IDOR)1
  8. CWE-73 External control of file name or path1
  9. CWE-798 Hard-coded credentials1
  10. CWE-862 Missing authorization1