Security Advisory

CVE-2026-27841

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-24 00:00:57

Last updated 2026-04-24 18:18:30

Assigner icscert

State PUBLISHED

Description

A vulnerability in SenseLive X3050s web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery (CSRF) protections. Because the application does not enforce server-side validation of request origin or implement CSRF tokens, a malicious external webpage could cause a users browser to submit unauthorized configuration requests to the device.

← Browse all CVEs View on cve.org ↗