CVE-2026-25720EPSS p20.7%
CVE-2026-25720CVE-2026-25720
senselive / x3500_firmware
Description
A vulnerability exists in SenseLive
X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for extended periods without requiring re-authentication. An attacker with access to a previously authenticated session could continue interacting with administrative functions long after legitimate user activity has ceased.
Scoring
| CVSS | 5.4 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
| EPSS | 0.28% probability of exploitation · percentile 20.7% · 2026-10-27T12:03:15Z |
| Last modified | 2026-10-26 |