Ghostwire

CVE-2026-25775: A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be...

CRITICAL CVSS 9.8 Exploit Available

Published: April 24, 2026 | Last Modified: April 24, 2026

Description

A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be performed without authentication or authorization. The service accepts firmware-related requests from any reachable host and does not verify user privileges, integrity of uploaded images, or the authenticity of provided firmware.

Ghostwire Analysis — What This Means Practically

Critical CVSS score indicates maximum severity — remote code execution, authentication bypass, or complete system compromise is likely possible.
Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

CVE-2026-25775: A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be...

Description

Ghostwire Analysis — What This Means Practically

Security Coverage (1 articles)

References