CVE-2026-40630: falha crítica em SenseLive X3050
SenseLive X3050 Authentication bypass using an alternate path or channel
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 0.7%
A vulnerability in
SenseLive
X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the intended authentication mechanism and directly interact with sensitive configuration functions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
SenseLive · X3050CVEs relacionadas — SenseLive X3050
No mesmo produto, das mais perigosas para as menos.
CVE-2026-35503CRITICALSenseLive X3050 Use of Hard-coded CredentialsEPSS 0.5%CVE-2026-40620CRITICALSenseLive X3050 Missing authentication for critical functionEPSS 0.5%CVE-2026-27843CRITICALSenseLive X3050 Missing authentication for critical functionEPSS 0.5%CVE-2026-35064HIGHSenseLive X3050 Missing authentication for critical functionEPSS 0.5%CVE-2026-25775CRITICALSenseLive X3050 Missing authentication for critical functionEPSS 0.4%CVE-2026-39462CRITICALSenseLive X3050 Insufficiently Protected CredentialsEPSS 0.4%