CVE-2026-35064CWE-306

SenseLive X3050 Missing authentication for critical function

High · published April 24, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are exposed by the underlying service rather than gated by authentication, an attacker on the same network segment can rapidly enumerate targeted devices.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00633 · 49.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-04-24T00:04Z
EPSS history
Timeline
  • 24 APR 00:04Z
    SenseLive X3050 Missing authentication for critical function
    cvelistv5