Skip to content

CVE record · 1 source

CVE-2026-105034

CVSS 8.2

The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication.

Vendor: Node.js
Product: Node.js
CVSS: 8.2
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

15

CVE NVD 16d ago

The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication.

The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid device token for any serial number and act as that…

CVSS 8.2 CVE-2026-105034 Node.js