Vulnerabilities in EnergizeLab
9 resultsCVE-2026-105038CRITICALEnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model SwitchingEPSS —CVE-2026-105035HIGHEnergizeLab FirmwareUpdater Universal Hard-Coded AES KeyEPSS —CVE-2026-105040HIGHEnergizeLab Eilik User-ID Mass Assignment Account TakeoverEPSS —CVE-2026-105037CRITICALEnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File ReadEPSS —CVE-2026-105036HIGHEnergizeLab Firmware Updates Downloaded over HTTP Without Integrity ChecksEPSS —CVE-2026-105034HIGHEnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial NumbersEPSS —CVE-2026-105033HIGHEnergizeLab AI Station Default Root Credentials with SSH EnabledEPSS —CVE-2026-105032CRITICALEnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File WriteEPSS —CVE-2026-105039CRITICALEnergizeLab Station Middleware Admin APIs Missing Role ChecksEPSS —