Remote Code Execution Vulnerability in EnergizeLab AI Station and EilikO Linux Robot Firmware
CVE-2026-105036

7.5HIGH

Key Information:

Vendor: Energizelab
Status: Robot Firmware (mode 104000); Ai Station Firmware (rk3562); Windows Desktop App (energizelabsetup-3.1.2-win.exe)
Vendor: CVE Published:; 15 October 2026

🔔 Create Energizelab Vulnerability Alert

What is CVE-2026-105036?

The EnergizeLab AI Station and EilikO Linux robot firmware versions are vulnerable due to their reliance on plain HTTP for firmware updates. This lack of encryption and integrity verification allows attackers to intercept update transmissions, enabling them to inject malicious code into the firmware, potentially compromising the devices. Users are advised to secure their devices and monitor for any firmware updates that address this vulnerability.