PT-2026-34808 · Unknown · Senselive X3050

Published 2026-04-23 · Updated 2026-04-25 · CVE-2026-39462

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SenseLive X3050 (affected versions not specified)

Description The web management interface contains an issue where password updates are not reliably applied because of improper handling of credential changes on the backend. Following a factory restore performed via the SenseLive Config 2.0 tool, the interface may falsely report a successful password update while the system continues to accept previous or default credentials. This indicates that the password-change process is not consistently enforced, and changes may fail to propagate correctly even after a factory reset.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2026-39462

Affected Products

Senselive X3050

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-39462 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json · Note
• https://twitter.com/CVEnew/status/2048168340502561014 · Twitter Post
• https://senselive.io/contact · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-111-12 · Note