What is CVE-2026-40431?

CVE-2026-40431 is a medium-severity vulnerability in Senselive X3050, classified under Cleartext Transmission of Sensitive Information. CVSS score: 5.3/10. Published 2026-04-24.

How severe is CVE-2026-40431?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Senselive X3050

CVE-2026-40431

A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication. Because management traffic, including authentication attempts and configuration data, is transmitted in cleartext, an attacker with access to the same network segment could intercept or observe sensitive operational information.

Published 2026-04-24 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

EPSS exploit prediction

EPSS: 0.003 (21.9th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 22nd percentile — 21.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.002 · newest: 0.003 · change: +0.001

Affected products

Senselive X3050 — versions V1.523
Senselive X3500
Senselive X3500 Firmware — versions 1.523

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

senselive.io/contact (Product)
www.cisa.gov/news-events/ics-advisories/icsa-26-111-12 (US Government Resource)
github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.js… (Third Party Advisory)

Frequently asked questions

What is CVE-2026-40431?: CVE-2026-40431 is a medium-severity vulnerability in Senselive X3050, classified under Cleartext Transmission of Sensitive Information. CVSS score: 5.3/10. Published 2026-04-24.
How severe is CVE-2026-40431?: Medium severity. CVSS v3 base score is 5.3 out of 10.