CVE-2026-40623 - Vulnerability Analysis

Overview

SenseLive X3050 contains a broken access control vulnerability caused by insufficient validation and safety controls on critical system and network configuration parameters, letting attackers modify core device behavior and cause denial of service, exploit requires access to the web management interface.

Severity & Score

Impact

Attackers can destabilize device operation or cause persistent unavailability, impacting network reliability and device functionality.

Mitigation

Update to the latest version with proper validation and safety controls.

References

• https://senselive.io/contact
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner