CVE-2026-35064

SenseLive X3050 Missing authentication for critical function

State
Published
Severity
8.7 High
Published
Apr 24, 2026
Updated
Apr 24, 2026
Reserved
Apr 14, 2026

Read the record on cve.org

Description

A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are exposed by the underlying service rather than gated by authentication, an attacker on the same network segment can rapidly enumerate targeted devices.

Scores

CVSSScoreVectorSource
4.08.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:Nicscert
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nicscert

Weaknesses

  • CWE-306 Missing authentication for critical function

Affected Products

ProductVersions
X3050SenseLive
  • V1.523Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.