Senselive's vulnerability profile centers on its X3500 industrial control and monitoring device and its firmware, a narrowly scoped but prominently positioned product in critical infrastructure and operational technology environments. Vulnerabilities affecting this vendor skew strongly toward critical severity and recur across authentication and session-management weakness classes—including missing authentication for critical functions, authentication bypass, cleartext transmission, CSRF, and insufficient session expiration—that directly expose device control and sensitive operational data to unauthorized access. Defenders should treat firmware updates for this device as high-priority and enforce strict network segmentation and access controls; live severity and exploitation counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Senselive over time
Signals from CVEs in this vendor scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-40630CRITICAL A vulnerability in
SenseLive
X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attack | Apr 24, 2026 | 9.8 | 33 | NO | NO |
CVE-2026-40620CRITICAL A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorization on the Sen | Apr 24, 2026 | 9.8 | 33 | NO | NO |
CVE-2026-35503CRITICAL A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values within browser-ex | Apr 24, 2026 | 9.8 | 31 | NO | NO |
CVE-2026-27843CRITICAL A vulnerability exists in SenseLive X3050's web management interface that allows critical configuration parameters to be modified without sufficient authentication or server-side v | Apr 24, 2026 | 9.1 | 30 | NO | NO |
CVE-2026-39462HIGH A vulnerability exists in SenseLive X3050’s web management interface in which password updates are not reliably applied due to improper handling of credential changes on the backen | Apr 24, 2026 | 8.1 | 28 | NO | NO |
CVE-2026-40623HIGH A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety co | Apr 24, 2026 | 8.1 | 27 | NO | NO |
CVE-2026-27841HIGH A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery (CSRF) protections. Because | Apr 24, 2026 | 8.1 | 27 | NO | NO |
CVE-2026-35064HIGH A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of de | Apr 24, 2026 | 7.5 | 26 | NO | NO |
CVE-2026-40431MEDIUM A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication. Because management traffic, inclu | Apr 24, 2026 | 5.3 | 19 | NO | NO |
CVE-2026-25720MEDIUM A vulnerability exists in SenseLive
X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for extended pe | Apr 24, 2026 | 5.4 | 19 | NO | NO |
Signals from CVEs in this vendor scope (10 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Senselive.
Media articles that mention a CVE ID that affects a product developed by Senselive — matched by CVE ID, not by vendor name.