{"metadata": {"vulnerability": "CVE-2026-105038", "count": 21, "kinds": {"milestone": 6, "sighting": 3, "kev": 0, "other": 12}}, "data": [{"timestamp": "2026-10-02T21:30:55.242Z", "date_only": false, "value": "2026-10-02T21:30:55.242Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-105038", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-02T21:30:55.242Z", "date_only": false, "value": "2026-10-02T21:30:55.242Z", "kind": "milestone", "label": "Reserved", "source": "gna-1337 \u00b7 GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010", "record": "GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T12:00:00Z", "date_only": false, "value": "2026-10-15T12:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / AHA", "record": "CVE-2026-105038", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T12:00:00Z", "date_only": false, "value": "2026-10-15T12:00:00.000Z", "kind": "other", "label": "Made public", "source": "gna-1337 \u00b7 GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010 / AHA", "record": "GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T20:43:30.618Z", "date_only": false, "value": "2026-10-15T20:43:30.618Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-105038", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T20:43:30.618Z", "date_only": false, "value": "2026-10-15T20:43:30.618Z", "kind": "milestone", "label": "Published", "source": "gna-1337 \u00b7 GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010", "record": "GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T20:43:30.618Z", "date_only": false, "value": "2026-10-15T20:43:30.618Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / AHA", "record": "CVE-2026-105038", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T20:43:30.618Z", "date_only": false, "value": "2026-10-15T20:43:30.618Z", "kind": "other", "label": "Updated", "source": "gna-1337 \u00b7 GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010", "record": "GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T20:43:30.618Z", "date_only": false, "value": "2026-10-15T20:43:30.618Z", "kind": "other", "label": "Updated", "source": "gna-1337 \u00b7 GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010 / AHA", "record": "GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T20:53:01.229Z", "date_only": false, "value": "2026-10-15T20:53:01.229737Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117446907021884887", "record": "CVE-2026-105038", "field": "creation_timestamp", "uuid": "7aa7b91b-3d39-4a61-9538-031e2f2c2a98", "content": "CVE-2026-105038 EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can change AI model configuration and switch the model in use at runtime.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105038https://github.com/xn0tsa/your-secrets-are-safe-with-mehttps://takeonme.org/gcves/GCVE-1337-2026-00000000000000111001111111111111111000000000000000000011111100100111111110000000000000000000011111111111111100000000000000000010010/https://www.theverge.com/tech/1010727/eiliko-robot-hack-energize-lab#EnergizeLab #FastAPIAIinferenceserver#CVE_2026_105038#bot", "url": "https://infosec.exchange/users/cve/statuses/117446907021884887"}, {"timestamp": "2026-10-15T21:17:04Z", "date_only": false, "value": "2026-10-15T21:17:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-33F8-3XW6-R37G", "record": "GHSA-33F8-3XW6-R37G", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T21:17:04.467Z", "date_only": false, "value": "2026-10-15T21:17:04.467", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105038", "record": "FKIE_CVE-2026-105038", "field": "published"}, {"timestamp": "2026-10-15T21:36:14Z", "date_only": false, "value": "2026-10-15T21:36:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-33F8-3XW6-R37G", "record": "GHSA-33F8-3XW6-R37G", "field": "published"}, {"timestamp": "2026-10-15T21:36:14Z", "date_only": false, "value": "2026-10-15T21:36:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-33F8-3XW6-R37G", "record": "GHSA-33F8-3XW6-R37G", "field": "modified"}, {"timestamp": "2026-10-15T21:50:05.445Z", "date_only": false, "value": "2026-10-15T21:50:05.445024Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxx25wapok2n", "record": "CVE-2026-105038", "field": "creation_timestamp", "uuid": "fc3f1c6e-6b9f-498c-a178-e439d0656869", "content": "CVE-2026-105038 - fastapi ai inference server\nThe FastAPI AI inference service from EnergizeLab allows anyone on the network to modify its AI model settings and swap the active model without proving who they are.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#energizelab #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxx25wapok2n"}, {"timestamp": "2026-10-15T22:08:17.185Z", "date_only": false, "value": "2026-10-15T22:08:17.185753Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxx36hxcxy2l", "record": "CVE-2026-105038", "field": "creation_timestamp", "uuid": "d0912ab7-67a3-4e29-9dee-f7e23cf8daa6", "content": "\ud83d\udea8 CVE-2026-105038 \u2014 CVSS 9.8 CRITICAL\n\nThe EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105038\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxx36hxcxy2l"}, {"timestamp": "2026-10-16T19:54:20.526Z", "date_only": false, "value": "2026-10-16T19:54:20.526865Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105038", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T19:54:20.526Z", "date_only": false, "value": "2026-10-16T19:54:20.526865Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105038", "record": "FKIE_CVE-2026-105038", "field": "metrics.ssvcV203.1.ssvcData.timestamp"}, {"timestamp": "2026-10-16T19:54:32.126Z", "date_only": false, "value": "2026-10-16T19:54:32.126Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-105038", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T19:54:32.126Z", "date_only": false, "value": "2026-10-16T19:54:32.126Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-105038", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T20:17:18.490Z", "date_only": false, "value": "2026-10-16T20:17:18.490", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-105038", "record": "FKIE_CVE-2026-105038", "field": "lastModified"}]}