A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Apr 24, 2026 · NIST NVD

   Detected

   A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the intended authentication mechanism and directly interact with sensitive configuration functions.

2. Jun 17, 2026 · NIST NVD

   Updated

   A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the intended authentication mechanism and directly interact with sensitive configuration functions.

Affected

• cpe senselive/x3500 firmware1.523

Sources

• CVE.orgVulnerability recordCVE-2026-40630

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-40630

  A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the intended authentication mechanism and

  nvd.nist.gov

References

• Third Party Advisory · github.com
• Product · senselive.io
• US Government Resource · cisa.gov