CVE-2026-40630 - Vulnerability Analysis

Overview

SenseLive X3050 contains an authentication bypass caused by improper access control enforcement in the web management interface, letting attackers with network access bypass authentication and access sensitive configuration endpoints.

Severity & Score

Impact

Attackers can bypass authentication to access and modify sensitive device configurations, potentially compromising device security.

Mitigation

Update to the latest version with proper access control enforcement.

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json
• https://senselive.io/contact

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 24, 2026

🔴 CVE-2026-40630 - Critical (9.8) A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the i... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-40630/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner