#energizeLab
LightNews LightNews
euvd-bot.bsky.social
🚨 EUVD-2026-102432
📊 7.5/10
🏢 EnergizeLab

📝 EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download fir...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102432

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 9:04 PM
devops-digest.com
2026年10月17日の重要脆弱性: Linuxカーネル、EnergizeLab、Mage OSSなど3件

本日公開されたCVSSスコア9.0以上の緊急度の高い脆弱性3件。Linuxカーネルのデータ破損、EnergizeLabのファイル読み取り、Mage OSSの認証不備に注意。
2026年10月17日の重要脆弱性: Linuxカーネル、EnergizeLab、Mage OSSなど3件
本日公開されたCVSSスコア9.0以上の緊急度の高い脆弱性3件。Linuxカーネルのデータ破損、EnergizeLabのファイル読み取り、Mage OSSの認証不備に注意。
vuln.devops-digest.com
October 17, 2026 at 5:16 AM
nile11.bsky.social
Hackers Can Rewrite What 68,000 Robot Toys Tell Children
..................
https://nile1.com/hackers-can-rewrite-what-68000-robot-toys-tell-children/
..................
#alibabaCloud #children'sPrivacy #companionRobots #connectedToysSecurity #dataBreach #eiliko #energizeLab #ftc #largeLanguageModel
1792261762_2026-10-17-image-9-bit-social-bluesky-2000x2000.jpg 2026-10-17-image-10.jpg
October 17, 2026 at 6:30 PM
neonotu.bsky.social
🔴 KRITISCH · EnergizeLab station-middleware (NestJS) Docker images: eine Schwachstelle

NVD (NIST)
EnergizeLab station-middleware (NestJS) Docker images: eine Schwachstelle
NVD (NIST) meldet eine Schwachstelle in EnergizeLab station-middleware (NestJS) Docker images mit dem Schweregrad kritisch. Betroffen: CVE-2026-105037, CVE-2026-105039. Die vollständige Beschreibung …
alerts.neonotu.com
October 16, 2026 at 8:08 PM
euvd-bot.bsky.social
🚨 EUVD-2026-102428
📊 9.1/10
🏢 EnergizeLab

📝 The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authenticatio...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102428

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 9:04 PM
euvd-bot.bsky.social
🚨 EUVD-2026-102435
📊 9.6/10
🏢 EnergizeLab

📝 EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-priv...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102435

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 9:03 PM
euvd-bot.bsky.social
🚨 EUVD-2026-102429
📊 8.8/10
🏢 EnergizeLab

📝 The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the devic...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102429

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 9:04 PM
euvd-bot.bsky.social
🚨 EUVD-2026-102430
📊 8.2/10
🏢 EnergizeLab

📝 The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102430

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 9:04 PM
euvd-bot.bsky.social
🚨 EUVD-2026-102434
📊 9.8/10
🏢 EnergizeLab

📝 The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An una...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102434

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 9:04 PM
euvd-bot.bsky.social
🚨 EUVD-2026-102433
📊 9.9/10
🏢 EnergizeLab

📝 EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from t...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102433

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 9:04 PM
euvd-bot.bsky.social
🚨 EUVD-2026-102431
📊 7.8/10
🏢 EnergizeLab

📝 The EnergizeLab FirmwareUpdater (AArch64 ELF, distributed in the CDN bin.zip) uses a single hard-coded AES key shared by all installations. An attac...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102431

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 9:04 PM
euvd-bot.bsky.social
🚨 EUVD-2026-102436
📊 8.8/10
🏢 EnergizeLab

📝 The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102436

#cybersecurity #infosec #cve #euvd
October 16, 2026 at 9:03 PM
stackflag.bsky.social
CVE-2026-105039 - station-middleware
The EnergizeLab station-middleware Docker images (versions 1.6.5 to 1.8.2) do not verify a user's role when accessing administrative functions. As a result,…

Too many irrelevant or confusing CVEs? Use stackflag.com

#stationmiddleware #energizelab #CVE #infosec
CVE-2026-105039: EnergizeLab station-middleware allows any user to change settings
The EnergizeLab station-middleware Docker images (versions 1.6.5 to 1.8.2) do not verify a user's role when accessing administrative functions.
stackflag.com
October 15, 2026 at 9:50 PM
stackflag.bsky.social
CVE-2026-105038 - fastapi ai inference server
The FastAPI AI inference service from EnergizeLab allows anyone on the network to modify its AI model settings and swap the active model without proving who they are.…

Too many irrelevant or confusing CVEs? Use stackflag.com

#energizelab #CVE #infosec
CVE-2026-105038: EnergizeLab FastAPI server lets anyone change AI model
The FastAPI AI inference service from EnergizeLab allows anyone on the network to modify its AI model settings and swap the active model without proving.
stackflag.com
October 15, 2026 at 9:50 PM
stackflag.bsky.social
CVE-2026-105032 - fastapi ai inference server
The upload function used by EnergizeLab Eilik and EilikO robots runs without any login check and does not limit where uploaded files can be placed. An attacker could…

Too many irrelevant or confusing CVEs? Use stackflag.com

#energizelab #CVE #infosec
CVE-2026-105032: FastAPI AI server allows unauthenticated file write
The upload function used by EnergizeLab Eilik and EilikO robots runs without any login check and does not limit where uploaded files can be placed.
stackflag.com
October 15, 2026 at 9:40 PM
postac001.bsky.social
EnergizeLab AI Station (RK3562)ファームウェアには、デフォルトのroot権限とSSHが有効になっています。ネットワークアクセスを持つ攻撃者はrootでログインし、デバイ…
CVE-2026-105033 CVSS 8.8 | HIGH
NVD - Home
nvd.nist.gov
October 16, 2026 at 4:17 AM
stemshop.bsky.social
🚨 CVE-2026-105032 — CVSS 9.1 CRITICAL

The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling...

🔎 https://stemshop.top/cve/CVE-2026-105032

#CVE #CyberSecurity #InfoSec
October 15, 2026 at 10:08 PM
stemshop.bsky.social
🚨 CVE-2026-105037 — CVSS 9.9 CRITICAL

EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privile...

🔎 https://stemshop.top/cve/CVE-2026-105037

#CVE #CyberSecurity #InfoSec
October 15, 2026 at 10:08 PM
stemshop.bsky.social
🚨 CVE-2026-105038 — CVSS 9.8 CRITICAL

The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration...

🔎 https://stemshop.top/cve/CVE-2026-105038

#CVE #CyberSecurity #InfoSec
October 15, 2026 at 10:08 PM
stemshop.bsky.social
🚨 CVE-2026-105039 — CVSS 9.6 CRITICAL

EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on admini...

🔎 https://stemshop.top/cve/CVE-2026-105039

#CVE #CyberSecurity #InfoSec
October 15, 2026 at 10:08 PM
stackflag.bsky.social
CVE-2026-105037 - station-middleware
The Station Middleware component used in Docker containers (versions 1.6.5 to 1.8.2) allows accounts with minimal rights to request any file on the server…

Too many irrelevant or confusing CVEs? Use stackflag.com

#stationmiddleware #energizelab #CVE #infosec
CVE-2026-105037: EnergizeLab Station Middleware lets low‑privilege users read any file
The Station Middleware component used in Docker containers (versions 1.6.5 to 1.8.2) allows accounts with minimal rights to request any file on the server.
stackflag.com
October 15, 2026 at 9:40 PM
tinoreviews.bsky.social
My new little buddy! The Energize Lab Robot Eilik will make the perfect addition to any desk and makes the perfect holiday or birthday gift! #tinoreviews #energizelab #eilik #robot #tiktokshopcreatorpicks
September 20, 2025 at 10:09 PM
daurmith.bsky.social
Pues les eché dinero a @EnergizeLab, los creadores de #eilik, y ya tengo a esta parejita en el pueblo (era un regalo para mis señorespadres).
January 27, 2025 at 11:43 AM
daurmith.bsky.social
Llevo todo el finde jugando con #Eilik, el robotito de @EnergizeLab. Es LA COSA MÁS CUQUI, aunque no deja de ser un bichillo bien diseñado con un sistema preprogramado de respuestas. Solo responde a comandos táctiles y de manera bastante previsible, pero es que…
January 27, 2025 at 11:31 AM
daurmith.bsky.social
Ya sabéis que tengo un Eilik, un robotito de @EnergizeLab muy simpático. Acabo de ver que han colgado el software en Google Drive y raras veces he tenido más ganas de aprender a programar. PERO ME CONTENGO
January 27, 2025 at 10:04 AM