Priority MEDIUM 44
A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and manageme…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00462 · Published 2026-04-24 · No fix listed CWE-306
Priority MEDIUM 49
A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorization on the SenseLive config application.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00546 · Published 2026-04-24 · No fix listed CWE-306
Priority LOW 36
A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery (CSRF) protections.
CVSS 4.0HIGH 8.4· Network · Low privileges · No interaction · EPSS 0.00162 · Published 2026-04-24 · No fix listed CWE-352
Priority LOW 32
A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls.
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00324 · Published 2026-04-23 · No fix listed CWE-862
Priority LOW 36
A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0019 · Published 2026-04-23 · No fix listed CWE-319
Priority MEDIUM 48
A vulnerability exists in SenseLive X3050's web management interface that allows critical configuration parameters to be modified without sufficient authentication or server-side validation.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00518 · Published 2026-04-23 · No fix listed CWE-306
Priority MEDIUM 42
A vulnerability exists in SenseLive X3050’s web management interface in which password updates are not reliably applied due to improper handling of credential changes on the backend.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00388 · Published 2026-04-23 · No fix listed CWE-522
Priority MEDIUM 49
A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values within browser-executed scripts rather than server-side v…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00548 · Published 2026-04-23 · No fix listed CWE-798
Priority LOW 30
A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for extended periods without requiring re-authentication…
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00283 · Published 2026-04-23 · No fix listed CWE-613
Priority MEDIUM 49
A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00727 · Published 2026-04-23 · No fix listed CWE-288