Unauthenticated Device Discovery Vulnerability in SenseLive X3050 Management Protocol
CVE-2026-35064

8.7HIGH

Key Information:

Vendor

Senselive

Status
X3050
Vendor
CVE Published:
24 April 2026

What is CVE-2026-35064?

A flaw in the SenseLive X3050’s management ecosystem permits unauthenticated discovery of units deployed within a network. By exploiting this vulnerability, an attacker can enumerate devices without needing authentication, thereby gaining sensitive insights into device identifiers and management interfaces. The absence of authentication requirements for discovery functions exposes these services, allowing unauthorized individuals on the same network segment to identify and interact with vulnerable devices rapidly.

Affected Version(s)

X3050 V1.523

References

https://senselive.io/contact
https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jithin Nambiar J reported these vulnerabilities to CISA.
.