Export limit exceeded: 410355 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 410355 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (2 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-105033 1 Energizelab 1 Ai Station Firmware (rk3562) 2026-10-19 8.8 High
The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.
CVE-2026-105036 1 Energizelab 3 Ai Station Firmware (rk3562), Robot Firmware (mode 104000), Windows Desktop App (energizelabsetup-3.1.2-win.exe) 2026-10-19 7.5 High
EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a malicious update.