CVE-2026-40630CWE-288

SenseLive X3050 Authentication bypass using an alternate path or channel

Critical · published April 23, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
58.9
In the wild
Unconfirmed
What it is

A vulnerability in

SenseLive

X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the intended authentication mechanism and directly interact with sensitive configuration functions.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00888 · 58.9th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2026-04-23T23:45Z
EPSS history
Timeline
  • 23 APR 23:45Z
    SenseLive X3050 Authentication bypass using an alternate path or channel
    cvelistv5