CVE-2026-25775: falha crítica em SenseLive X3050
SenseLive X3050 Missing authentication for critical function
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 0.4%
A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be performed without authentication or authorization. The service accepts firmware-related requests from any reachable host and does not verify user privileges, integrity of uploaded images, or the authenticity of provided firmware.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
SenseLive · X3050CVEs relacionadas — SenseLive X3050
No mesmo produto, das mais perigosas para as menos.
CVE-2026-40630CRITICALSenseLive X3050 Authentication bypass using an alternate path or channelEPSS 0.7%CVE-2026-35503CRITICALSenseLive X3050 Use of Hard-coded CredentialsEPSS 0.5%CVE-2026-40620CRITICALSenseLive X3050 Missing authentication for critical functionEPSS 0.5%CVE-2026-27843CRITICALSenseLive X3050 Missing authentication for critical functionEPSS 0.5%CVE-2026-35064HIGHSenseLive X3050 Missing authentication for critical functionEPSS 0.5%CVE-2026-39462CRITICALSenseLive X3050 Insufficiently Protected CredentialsEPSS 0.4%