Critical severity9.8NVD Advisory· Published Apr 24, 2026· Updated Apr 24, 2026
CVE-2026-25775
CVE-2026-25775
Description
A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be performed without authentication or authorization. The service accepts firmware-related requests from any reachable host and does not verify user privileges, integrity of uploaded images, or the authenticity of provided firmware.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
1- SenseLive X3050CISA Alerts