<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 17 Oct 2026 01:43:54 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2026-105038</title>
      <link>https://db.gcve.eu/vuln/fkie_cve-2026-105038</link>
      <description>&lt;p&gt;The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/fkie_cve-2026-105038</guid>
    </item>
    <item>
      <title>GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010 — EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching</title>
      <link>https://db.gcve.eu/vuln/gcve-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; EnergizeLab FastAPI AI inference server&lt;/p&gt;
&lt;p&gt;The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; EnergizeLab FastAPI AI inference server&lt;/p&gt;
&lt;p&gt;The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/gcve-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010</guid>
    </item>
    <item>
      <title>GHSA-33f8-3xw6-r37g</title>
      <link>https://db.gcve.eu/vuln/ghsa-33f8-3xw6-r37g</link>
      <description>&lt;p&gt;The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/ghsa-33f8-3xw6-r37g</guid>
    </item>
  </channel>
</rss>
