CVE-2026-25775 — SenseLive X3050 Missing authentication for critical function
A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be performed without authentication or authorization. The servi…
Published: 2026-04-24 · CVSS: 9.3 · CVSS 4.0
A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be performed without authentication or authorization. The service accepts firmware-related requests from any reachable host and does not verify user privileges, integrity of uploaded images, or the authenticity of provided firmware.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7