Vulnerability in Senselive X3050
CVE-2026-40431
A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication. Because management traffic, including authentication attempts and configuration data, is tra…
EPSS: 0.000 (10.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Senselive X3050 — versions V1.523
- Senselive X3500
- Senselive X3500_firmware — versions 1.523
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (Product)
- ics-cert@hq.dhs.gov (US Government Resource)
- ics-cert@hq.dhs.gov (Third Party Advisory)
Frequently asked questions
- What is CVE-2026-40431?
- CVE-2026-40431 is a medium-severity vulnerability in Senselive X3050, classified under Cleartext Transmission of Sensitive Information. CVSS score: 5.3/10. Published 2026-04-24.
- How severe is CVE-2026-40431?
- Medium severity. CVSS v3 base score is 5.3 out of 10.