Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2026-105036

EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks

EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a malicious update.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Energizelab
Products
Ai Station Firmware (rk3562) Robot Firmware (mode 104000) Windows Desktop App (energizelabsetup-3.1.2-win.exe)