CVE-2026-40630: fallo crítico en SenseLive X3050
SenseLive X3050 Authentication bypass using an alternate path or channel
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.3epss 0.7%
A vulnerability in
SenseLive
X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the intended authentication mechanism and directly interact with sensitive configuration functions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
SenseLive · X3050CVEs relacionadas — SenseLive X3050
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-35503CRITICALSenseLive X3050 Use of Hard-coded CredentialsEPSS 0.5%CVE-2026-40620CRITICALSenseLive X3050 Missing authentication for critical functionEPSS 0.5%CVE-2026-27843CRITICALSenseLive X3050 Missing authentication for critical functionEPSS 0.5%CVE-2026-35064HIGHSenseLive X3050 Missing authentication for critical functionEPSS 0.5%CVE-2026-25775CRITICALSenseLive X3050 Missing authentication for critical functionEPSS 0.4%CVE-2026-39462CRITICALSenseLive X3050 Insufficiently Protected CredentialsEPSS 0.4%