CVE-2026-27843 - Vulnerability Analysis

Overview

SenseLive X3050 contains a broken access control vulnerability caused by insufficient authentication and server-side validation in the web management interface, letting attackers modify critical configuration parameters to cause persistent lockout and denial of service, exploit requires network access to the management interface.

Severity & Score

Impact

Attackers can cause persistent lockout and total denial of service, disrupting gateway and connected systems.

Mitigation

Update to the latest firmware version with proper authentication and validation controls.

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json
• https://senselive.io/contact

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner