Vulnerability · Published Apr 23, 2026 · Assigned by icscert
CVE-2026-40431SenseLive X3050 Cleartext transmission of sensitive information
Medium 5.3
In plain English
A medium-severity security flaw in X3050 from SenseLive. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Official description
A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication. Because management traffic, including authentication attempts and configuration data, is transmitted in cleartext, an attacker with access to the same network segment could intercept or observe sensitive operational information.
Affected products (as reported)
Weakness: CWE-319 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N