High severity7.5NVD Advisory· Published Oct 15, 2026

CVE-2026-105036

Description

EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a malicious update.

Affected products

EnergizeLab/AI Station firmwarellm-create
EnergizeLab/Windows desktop appllm-create
Range: 3.1.2
EilikO/Linux robot firmwarellm-create
Range: 2.1_20260617182218_release

Patches

Vulnerability mechanics

References

takeonme.org/gcves/GCVE-1337-2026-00000000000000000000111111111100000000000000000000000011111100001111111101000000000000000000011111111111111100000000000000000010000/nvd
www.theverge.com/tech/1010727/eiliko-robot-hack-energize-labnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000