PT-2026-34809 · Unknown · Senselive X3050

Published 2026-04-23 · Updated 2026-04-25 · CVE-2026-40431

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SenseLive X3050 (affected versions not specified)

Description The web management interface relies on unencrypted HTTP for all administrative communication. This allows an attacker on the same network segment to intercept or observe sensitive operational information, including configuration data and authentication attempts, as the traffic is transmitted in cleartext.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2026-40431

Affected Products

Senselive X3050

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-40431 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json · Note
• https://senselive.io/contact · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-111-12 · Note
• https://twitter.com/CVEnew/status/2048168338623541705 · Twitter Post