CVE-2026-105037 — EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read
EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an att…
Published: 2026-10-15 · CVSS: 9.9 · CVSS 3.1
EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7