CVE-2026-105037Critical· 9.9▾ MidnightEnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files an…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 54.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.
station-middleware >= 1.6.5 <= 1.8.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-105039Critical· 9.6EnergizeLab Station Middleware Admin APIs Missing Role Checks
CVE-2026-105032Critical· 9.1EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write
CVE-2026-105038Critical· 9.8EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching
CVE-2026-105035High· 7.8EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key
CVE-2026-105034High· 8.2EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers
CVE-2026-105033High· 8.8EnergizeLab AI Station Default Root Credentials with SSH Enabled