CVE-2026-40623Active Exploitation(senselive / x3500)

MEDIUMCVSS 7.2 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch senselive x3500 systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation and safety controls. Due to inadequate enforcement of constraints on sensitive functions, parameters such as IP addressing, watchdog timers, reconnect intervals, and service ports can be set to unsupported or unsafe values. These configuration changes directly affect core device behaviour and recovery mechanisms. The lack of proper validation and safeguards allows critical system functions to be altered in a manner that can destabilize device operation or render the device persistently unavailable.

senselive CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json

Other references

Weakness type (CWE)

CWE-862

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

x3500
x3500_firmware

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-04-24); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

senselive

Products

x3500x3500_firmware

2 versions affected across 2 products

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Active Exploitation

150.0%

Disclosure

150.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-40623

Classification over time

Date	Total	Labels

2026-04-24	1	Active Exploitation1
2026-04-25	1	Disclosure1

Full discourse2 posts

CVE@CVEnew166d
Disclosure
CVE-2026-40623 A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation… https://www.cve.org/CVERecord?id=CVE-2026-40623
Post summary
A disclosed vulnerability (CVE-2026-40623) in SenseLive X3050 permits unauthorized changes to critical system and network settings via its web interface, with no known exploits, PoC, or patch information shared.
0000070
57.2K followersView on X
NerdieNews@NewsNerdie167d
Active Exploitation
SenseLive X3050 CVE-2026-40623 is under active exploitation — attackers can breach the web management interface without authorization. Critical severity: patch now to prevent unauthorized access. #NerdieNews #CyberSecurity #InfoSec #ThreatIntel #APT #Microsoft #DevSecOps https://t.co/GteSq3I6Nx
Post summary
The post states that CVE-2026-40623 is actively exploited, allowing attackers to breach the SenseLive X3050 web interface, and urges immediate patching.
0000045
55 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	senselive	x3500	-	-	-
OS	senselive	x3500_firmware	1.523	-	-

Explore more

Back to dashboard senselive CVEs x3500 vulnerabilities