Export limit exceeded: 425758 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-105033

EnergizeLab AI Station Default Root Credentials with SSH Enabled

The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Energizelab
Products
Ai Station Firmware (rk3562)
CVE-2026-105036

EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks

EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a malicious update.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Energizelab
Products
Ai Station Firmware (rk3562) Robot Firmware (mode 104000) Windows Desktop App (energizelabsetup-3.1.2-win.exe)