Security Flaw in SenseLive X3050 Management Service Exposes Configuration Risks
CVE-2026-40620

9.3CRITICAL

Key Information:

Vendor

Senselive

Status
X3050
Vendor
CVE Published:
24 April 2026

What is CVE-2026-40620?

A security vulnerability in the SenseLive X3050's embedded management service permits unauthorized administrative access, allowing attackers to establish control without authentication or authorization. This flaw enables management connections from any reachable host, posing significant risks as it could lead to unrestricted modifications of critical configuration parameters, operational modes, and the overall device state through compatible client applications. Proper measures and patches are essential to mitigate the risks associated with this vulnerability.

Affected Version(s)

X3050 V1.523

References

https://senselive.io/contact
https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jithin Nambiar J reported these vulnerabilities to CISA.
.