CVE-2026-35503 — SenseLive X3050 Use of Hard-coded Credentials
A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values within browser…
Published: 2026-04-23 · CVSS: 9.3 · CVSS 4.0
A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values within browser-executed scripts rather than server-side verification. An attacker with access to the login page could retrieve these exposed parameters and gain unauthorized access to administrative functionality.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7