A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery (CSRF) …

Published:

23 april 2026 om 22:00:00

Alert date:

24 april 2026 om 15:07:56

Source:

nvd.nist.gov

Mobile & IoT, Critical Infrastructure

A Cross-Site Request Forgery (CSRF) vulnerability exists in SenseLive X3050's web management interface. The vulnerability allows state-changing operations to be triggered without proper CSRF protections. The application lacks server-side validation of request origin and does not implement CSRF tokens. Malicious external webpages can cause user browsers to submit unauthorized configuration requests to the device. This affects the device's web management interface and could lead to unauthorized configuration changes.

Technical details

Mitigation steps:

Affected products:

SenseLive X3050