CVE ID :CVE-2026-105039 Published : Oct. 15, 2026, 9:17 p.m. | 16 minutes ago Description :EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provider keys and change...

#Sicherheitslücke #Cloud

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-105039 - EnergizeLab Station Middleware Admin APIs Missing Role Checks

VERWANDTEARTIKEL

CVE-2026-85791

CVE-2026-108446 - Microsoft Office Excel Remote Code Execution Vulnerability

CVE-2026-108451 - Microsoft Office Word Remote Code Execution Vulnerability

CVE-2026-105037 - EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read

CVE-2026-105038 - EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching

CVE-2026-105040 - EnergizeLab Eilik User-ID Mass Assignment Account Takeover