Vulnerability Description
A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, identifiers, and management interfaces without requiring credentials. Because discovery functions are exposed by the underlying service rather than gated by authentication, an attacker on the same network segment can rapidly enumerate targeted devices.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Senselive | X3500 Firmware | 1.523 |
| Senselive | X3500 | - |
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-11Third Party Advisory
- https://senselive.io/contactProduct
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12US Government Resource
FAQ
What is CVE-2026-35064?
CVE-2026-35064 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identification of device presence, ident...
How severe is CVE-2026-35064?
CVE-2026-35064 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-35064?
Check the references section above for vendor advisories and patch information. Affected products include: Senselive X3500 Firmware, Senselive X3500.