Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Priority MEDIUM 48

A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be performed without authentication or authorization.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00405 Published 2026-04-24 No fix listed CWE-306
Priority MEDIUM 44

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and manageme…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00462 Published 2026-04-24 No fix listed CWE-306
Priority MEDIUM 49

A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorization on the SenseLive config application.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00546 Published 2026-04-24 No fix listed CWE-306
TI-2026-22192 CVE-2026-27841 · GHSA-245p-p394-pw8w

SenseLive X3050 Cross-Site request forgery

Priority LOW 36

A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery (CSRF) protections.

CVSS 4.0HIGH 8.4 Network Low privileges No interaction EPSS 0.00162 Published 2026-04-24 No fix listed CWE-352
TI-2026-29355 CVE-2026-40623 · GHSA-cg8c-rhc6-wgg5

SenseLive X3050 Missing Authorization

Priority LOW 32

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00324 Published 2026-04-23 No fix listed CWE-862
Priority LOW 36

A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0019 Published 2026-04-23 No fix listed CWE-319
Priority MEDIUM 48

A vulnerability exists in SenseLive X3050's web management interface that allows critical configuration parameters to be modified without sufficient authentication or server-side validation.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00518 Published 2026-04-23 No fix listed CWE-306
Priority MEDIUM 42

A vulnerability exists in SenseLive X3050’s web management interface in which password updates are not reliably applied due to improper handling of credential changes on the backend.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00388 Published 2026-04-23 No fix listed CWE-522
Priority MEDIUM 49

A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values within browser-executed scripts rather than server-side v…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00548 Published 2026-04-23 No fix listed CWE-798
Priority LOW 30

A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for extended periods without requiring re-authentication…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00283 Published 2026-04-23 No fix listed CWE-613
Priority MEDIUM 49

A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00727 Published 2026-04-23 No fix listed CWE-288