PT-2026-34797 · Senselive · X3050

Published 2026-04-23 · Updated 2026-04-24 · CVE-2026-40630

NVD

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A vulnerability in  SenseLive

X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the intended authentication mechanism and directly interact with sensitive configuration functions.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2026-40630

Affected Products

X3050

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-40630 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json · Note
• https://senselive.io/contact · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-111-12 · Note