E
Vendor security profile
EnergizeLab
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical4
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS8.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
9
CVE KEV
CVE severity distribution
9toplam CVE
Critical4 (44%)
High5 (56%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
8.8
CVE-2026-105040
EnergizeLab Eilik User-ID Mass Assignment Account Takeover
E
Patch status unknown
9.6
CVE-2026-105039
EnergizeLab Station Middleware Admin APIs Missing Role Checks
E
Patch status unknown
9.8
CVE-2026-105038
EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching
E
Patch status unknown
9.9
CVE-2026-105037
EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read
E
Patch status unknown
7.5
CVE-2026-105036
EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks
E
Patch status unknown
7.8
CVE-2026-105035
EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key
E
Patch status unknown
8.2
CVE-2026-105034
EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers
E
Patch status unknown
8.8
CVE-2026-105033
EnergizeLab AI Station Default Root Credentials with SSH Enabled
E
Patch status unknown
9.1
CVE-2026-105032
EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write
E
Patch status unknown