CVE-2026-25720

Summary

A vulnerability exists in SenseLive

X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for extended periods without requiring re-authentication. An attacker with access to a previously authenticated session could continue interacting with administrative functions long after legitimate user activity has ceased.

Affected Software

Weaknesses

• CWE-613: CWE-613 Insufficient session expiration

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://senselive.io/contact
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json

• ←Previous
• Next→