CVE-2026-39462 - Vulnerability Analysis

Overview

SenseLive X3050 contains a broken authentication caused by improper handling of credential changes in the web management interface, letting attackers bypass password updates after factory reset, exploit requires access to the device interface.

Severity & Score

Impact

Attackers can bypass password changes, potentially allowing unauthorized access to the device even after factory reset.

Mitigation

Update to the latest firmware version that fixes credential handling issues.

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json
• https://senselive.io/contact
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner