PT-2026-115223 · Energizelab · Ai Station Firmware+2

·

CVE-2026-105036

·

Published

2026-10-15

·

Updated

2026-10-15

CVSS v3.1

7.5

High

VectorAV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1 20260617182218 release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a malicious update.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-105036

Affected Products

Ai Station Firmware
Robot Firmware
Windows Desktop App