EN
Vendor
EnergizeLab
11
CVEs
0
On KEV
11
New 30D
Products
FA9.8
FastAPI AI inference server
EnergizeLab
2 CVEs0 on KEV2 new
ST9.9
station-middleware
EnergizeLab
2 CVEs0 on KEV2 new
AS8.8
AI Station firmware (RK3562)
EnergizeLab
2 CVEs0 on KEV2 new
NA8.8
NestJS auth service
EnergizeLab
2 CVEs0 on KEV2 new
FI7.8
FirmwareUpdater
EnergizeLab
1 CVEs0 on KEV1 new
RF7.5
Robot firmware (mode 104000)
EnergizeLab
1 CVEs0 on KEV1 new
WD7.5
Windows desktop app (EnergizeLabSetup-3.1.2-Win.exe)
EnergizeLab
1 CVEs0 on KEV1 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105040 | NA NestJS auth service EnergizeLab | 8.8 | Oct 15 | EnergizeLab Eilik User-ID Mass Assignment Account Takeover |
| CVE-2026-105039 | ST station-middleware EnergizeLab | 9.6 | Oct 15 | EnergizeLab Station Middleware Admin APIs Missing Role Checks |
| CVE-2026-105038 | FA FastAPI AI inference server EnergizeLab | 9.8 | Oct 15 | EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching |
| CVE-2026-105037 | ST station-middleware EnergizeLab | 9.9 | Oct 15 | EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read |
| CVE-2026-105036 | RF Robot firmware (mode 104000) EnergizeLab | 7.5 | Oct 15 | EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks |
| CVE-2026-105035 | FI FirmwareUpdater EnergizeLab | 7.8 | Oct 15 | EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key |
| CVE-2026-105034 | NA NestJS auth service EnergizeLab | 8.2 | Oct 15 | EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers |
| CVE-2026-105033 | AS AI Station firmware (RK3562) EnergizeLab | 8.8 | Oct 15 | EnergizeLab AI Station Default Root Credentials with SSH Enabled |
| CVE-2026-105032 | FA FastAPI AI inference server EnergizeLab | 9.1 | Oct 15 | EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write |