Web Management Interface Vulnerability in SenseLive X3050 from SenseLive
CVE-2026-40623

7.2HIGH

Key Information:

Vendor

Senselive

Status
X3050
Vendor
CVE Published:
23 April 2026

What is CVE-2026-40623?

The SenseLive X3050 features a vulnerability in its web management interface, enabling unauthorized modifications of critical system and network configuration parameters. This lack of sufficient validation and safety controls permits alterations to essential settings such as IP addressing, watchdog timers, reconnect intervals, and service ports, which may lead to unsupported or unsafe configurations. Consequently, these adjustments can significantly impact the device's core functionality and recovery mechanisms, increasing the risk of device instability or making it entirely unavailable. It is essential to implement robust validation mechanisms to safeguard against such vulnerabilities.

Affected Version(s)

X3050 V1.523

References

https://senselive.io/contact
https://www.cisa.gov/news-events/ics-advisories/icsa-26-1...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jithin Nambiar J reported these vulnerabilities to CISA.
.