CVE-2026-40630

CRITICAL9.8

SenseLive X3050 Authentication bypass using an alternate path or channel

Published Apr 23, 2026

Modified Today

Details

A vulnerability in SenseLive

X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the intended authentication mechanism and directly interact with sensitive configuration functions.

References

WEB

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json

WEB

https://senselive.io/contact

WEB

https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-40630

CVSS Analysis

CVSS v4.0

9.3