CVE-2026-105037
CRITICAL
NVD
CVSS Score
9.9
Severity
CRITICAL
Published
Oct 15, 2026
Vendor
unknown
Description
EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attacker-controlled file path. This exposes middleware files and server secrets.