CVE-2026-40630
SenseLive X3050 Authentication bypass using an alternate path or channel
Vexday Risk Score
28Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 9.3EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
23 abr 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability in
SenseLive
X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the intended authentication mechanism and directly interact with sensitive configuration functions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
SenseLive · X3050¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →