VULNERABILITY INTELLIGENCE

CVE-2026-25720

CVSS score6.9 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2026-04-24
Last modified2026-10-26
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Description

A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for extended periods without requiring re-authentication. An attacker with access to a previously authenticated session could continue interacting with administrative functions long after legitimate user activity has ceased.

Weakness classification

  • CWE-613: Insufficient Session Expiration

Primary references