PT-2026-34811 · Unknown · Senselive X3050

Published 2026-04-23 · Updated 2026-04-25 · CVE-2026-40623

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions SenseLive X3050 (affected versions not specified)

Description The web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchdog timers, reconnect intervals, and service ports can be set to unsupported or unsafe values. These changes affect core device behavior and recovery mechanisms, which can destabilize operation or render the device persistently unavailable. This issue is under active exploitation, allowing unauthorized access to the web management interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-40623

Affected Products

Senselive X3050

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-40623 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json · Note
• https://twitter.com/NewsNerdie/status/2047586938454934002 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-26-111-12 · Note
• https://senselive.io/contact · Note
• https://twitter.com/CVEnew/status/2048168336845119499 · Twitter Post