Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-35503 EUVD-2026-25359GHSA-44q2-xjg6-chh9

SenseLive X3050 Use of Hard-coded Credentials

Published Apr 23, 2026 · Updated Apr 24, 2026 · Assigned by icscert

Description

A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values within browser-executed scripts rather than server-side verification. An attacker with access to the login page could retrieve these exposed parameters and gain unauthorized access to administrative functionality.

Affected products

VendorProductAffectedFixed
SenseLive X3050 V1.523 —

Advisories 1

References