Senselive X3500 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Senselive X3500 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2026-35503 — CVSS 9.8 (critical): A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side…
• CVE-2026-40620 — CVSS 9.8 (critical): A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of…
• CVE-2026-40630 — CVSS 9.8 (critical): A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to…
• CVE-2026-27843 — CVSS 9.1 (critical): A vulnerability exists in SenseLive X3050's web management interface that allows critical configuration parameters to be modified without…
• CVE-2026-39462 — CVSS 8.1 (high): A vulnerability exists in SenseLive X3050’s web management interface in which password updates are not reliably applied due to improper…
• CVE-2026-27841 — CVSS 8.1 (high): A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site…
• CVE-2026-40623 — CVSS 8.1 (high): A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified…
• CVE-2026-35064 — CVSS 7.5 (high): A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s…
• CVE-2026-25720 — CVSS 5.4 (medium): A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated…
• CVE-2026-40431 — CVSS 5.3 (medium): A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative…