VULNERABILITY INTELLIGENCE

CVE-2026-40630

CVSS score9.8 CRITICAL
EPSS probability0.73%
CISA KEVNot currently listed
Published2026-04-24
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability in  SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the intended authentication mechanism and directly interact with sensitive configuration functions.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-288

Primary references