PT-2026-34810 · Senselive · X3050

Published 2026-04-24 · Updated 2026-04-24 · CVE-2026-40620

Mitre

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorization on the SenseLive config application. The service accepts management connections from any reachable host, enabling unrestricted modification of critical configuration parameters, operational modes, and device state through a vendor-supplied or compatible client.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-40620

Affected Products

X3050

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-40620 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json · Note
• https://senselive.io/contact · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-111-12 · Note