Veille CVE

Semaine du 12 octobre au 18 octobre 2026

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « EnergizeLab AI Station firmware (RK3562) » ✕
  1. CVE-2026-105036 7.5 Élevée

    EnergizeLab Robot firmware (mode 104000) · EnergizeLab AI Station firmware (RK3562) · EnergizeLab Windows desktop app (EnergizeLabSetup-3.1.2-Win.exe)

    EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a malicious update.

  2. CVE-2026-105033 8.8 Élevée

    EnergizeLab AI Station firmware (RK3562)

    The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.