The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Oct 15, 2026 · NIST NVD

   Detected

   The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.

Sources

• CVE.orgVulnerability recordCVE-2026-105033

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-105033

  The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take full control of it.

  nvd.nist.gov

References

• Reference · github.com
• Reference · takeonme.org
• Reference · theverge.com