CVE-2026-105036

7.5 HIGHpublic exploit available

Published 2026-10-15 · Updated 2026-10-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a malicious update.

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-494

Public exploit & PoC references

https://github.com/xn0tsa/your-secrets-are-safe-with-me

All references

https://github.com/xn0tsa/your-secrets-are-safe-with-me
https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000111111111100000000000000000000000011111100001111111101000000000000000000011111111111111100000000000000000010000/
https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100265
UNSCOREDCVE-2026-102930PoC
UNSCOREDCVE-2026-104805
UNSCOREDCVE-2026-104809
MEDIUMCVE-2026-105137PoC
HIGHCVE-2026-105295PoC
HIGHCVE-2026-107812PoC
HIGHCVE-2026-108160PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.