PT-2026-34806 · Senselive · X3050

Published 2026-04-24 · Updated 2026-04-25 · CVE-2026-35064

Mitre

CVSS v3.1

7.5

High

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are exposed by the underlying service rather than gated by authentication, an attacker on the same network segment can rapidly enumerate targeted devices.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-35064

Affected Products

X3050

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-35064 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json · Note
• https://twitter.com/CVEnew/status/2048099348232257614 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-26-111-12 · Note
• https://senselive.io/contact · Note