FirmwareUpdater vulnerabilities

CVEs whose affected-version data names the FirmwareUpdater package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-105035High· 7.8

2w ago

The EnergizeLab FirmwareUpdater (AArch64 ELF, distributed in the CDN bin.zip) uses a single hard-coded AES key shared by all installations

The EnergizeLab FirmwareUpdater (AArch64 ELF, distributed in the CDN bin.zip) uses a single hard-coded AES key shared by all installations. An attacker who recovers the key from the updater can decrypt and forge firmware packages for any…

▾ TwilightEnergizeLab · FirmwareUpdaterEPSS 0.20%via NVD