CVE-2026-40630

SenseLive X3050 Authentication bypass using an alternate path or channel

CVSS 9.3 CRITICALEPSS 0.7%CWE-288

Vexday Risk Score

28Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 9.3EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

23 abr 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the intended authentication mechanism and directly interact with sensitive configuration functions.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

SenseLive · X3050

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json https://senselive.io/contact https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12