CVE-2026-105033: falha de alta gravidade em EnergizeLab AI Station firmware (RK3562)
EnergizeLab AI Station Default Root Credentials with SSH Enabled
Publicada em
18Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8
probabilidade de exploração
—
exploração observada
nãonenhuma fonte reporta
The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
EnergizeLab · AI Station firmware (RK3562)CVEs relacionadas — EnergizeLab AI Station firmware (RK3562)
No mesmo produto, das mais perigosas para as menos.
Referências
https://github.com/xn0tsa/your-secrets-are-safe-with-mehttps://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000001110111111110111111111111000000000000000000000000000000000000000000000000000001101/https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab