CVE-2026-105033

8.8 HIGHpublic exploit available

Published 2026-10-15 · Updated 2026-10-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-798

Public exploit & PoC references

https://github.com/xn0tsa/your-secrets-are-safe-with-me

All references

https://github.com/xn0tsa/your-secrets-are-safe-with-me
https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000001110111111110111111111111000000000000000000000000000000000000000000000000000001101/
https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-100294
HIGHCVE-2026-101052PoC
HIGHCVE-2026-102161
MEDIUMCVE-2026-102666
HIGHCVE-2026-103096
HIGHCVE-2026-103097
MEDIUMCVE-2026-105141PoC
HIGHCVE-2026-105147PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.