CVE-2026-27841

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2026-27841 is a Cross-Site Request Forgery (CSRF) vulnerability, classified under CWE-352, affecting the web management interface of the SenseLive X3050 device. The flaw enables state-changing operations to be triggered without adequate CSRF protections, as the application fails to enforce server-side validation of request origins or implement CSRF tokens. This allows a malicious external webpage to cause a user's browser to submit unauthorized configuration requests to the device. The vulnerability has a CVSS v3.1 base score of 8.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H), indicating high severity due to its potential for significant integrity and availability impacts.

Exploitation requires an attacker to lure an authenticated user—typically an administrator accessing the web interface—into visiting a malicious external webpage. No privileges are needed on the target device, and the attack is feasible over the network with low complexity, though it relies on user interaction. Successful exploitation enables the attacker to perform unauthorized configuration changes, potentially disrupting device operations or altering settings with high integrity and availability consequences.

Mitigation guidance is detailed in the CISA ICS Advisory ICSA-26-111-12, available at https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12, along with the corresponding CSAF JSON file at https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-111-12.json. Additional support, including potential patches, can be obtained by contacting SenseLive via https://senselive.io/contact.