This vulnerability (CVE-2026-39462) affects SenseLive X3050 version V1.523. It involves improper handling of credential changes on the backend of the device's web management interface. Specifically, after a factory restore via the SenseLive Config 2.0 tool, password updates may not propagate correctly, allowing the system to accept old or default passwords despite the interface indicating success. The CVSS 4.0 score is 9.3 (critical), reflecting network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No official patch or remediation level has been published, and no known exploits are reported in the wild.

The vulnerability allows an attacker to potentially gain unauthorized access to the device by using previous or default credentials even after a factory reset and password change attempt. This undermines the security of the device's management interface, risking unauthorized control or configuration changes. The critical CVSS score indicates a severe impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when performing factory resets and password changes on affected devices. Monitoring vendor communications for updates is recommended. No specific temporary mitigations are provided in the available data.