← Back to CVE search

CVE-2026-25720

SenseLive X3050

Description

A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for extended periods without requiring re-authentication. An attacker with access to a previously authenticated session could continue interacting with administrative functions long after legitimate user activity has ceased.

CVSS 5.4EPSS 0.28300000000000003%Risk 0.55
View source
Published
2026-04-24 00:16:26
Affected versions
unknown
Type
Firmware
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N