How to Fix CVE-2026-27843: X3050 (Bundle Sibling)
By Sai Kiran Pandrala
Last verified: 2026-05-25
CVE-2026-27843 is a sibling vulnerability in the same vendor advisory as CVE-2026-25720. Applying the patched build named in the primary write-up closes this CVE as well.
| Severity | CVSS 9.2 - Critical |
|---|---|
| Actively exploited? | Not currently in CISA KEV |
| Affected | Same as the bundle - see CVE-2026-25720 |
| Fixed in | Same patched build as CVE-2026-25720 (See vendor advisory) |
| Type (CWE) | CWE-306: CWE-306 Missing authentication for critical function |
What's different about CVE-2026-27843?
A vulnerability exists in SenseLive X3050's web management interface that allows critical configuration parameters to be modified without sufficient authentication or server-side validation. By applying unsupported or disruptive values to recovery mechanisms and network settings, an attacker can induce a persistent lockout state. Because the device lacks a physical reset button, recovery requires specialized technical access via the console to perform a factory reset, resulting in a total denial-of-service for the gateway and its connected RS-485 downstream systems.
The technical impact and remediation are identical to the primary CVE in the bundle. The same vendor patch closes both.
How to fix CVE-2026-27843
Apply the patched build per the primary write-up: How to Fix CVE-2026-25720.
The patch installation procedure, verification commands, and interim mitigations are documented there. Reusing one runbook keeps the rollout consistent across the bundle.
Frequently asked questions
Is CVE-2026-27843 fixed by the same patch as CVE-2026-25720?
Yes. CVE-2026-27843 ships in the same vendor advisory as CVE-2026-25720. Applying the patched build named in the primary write-up closes both.
What is the CVSS score for CVE-2026-27843?
The CVSS base score is 9.2 (Critical).
Is it being exploited?
It is not currently listed in CISA KEV.
References
- Official vendor advisory: https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12
- NVD entry: https://nvd.nist.gov/vuln/detail/CVE-2026-27843
- CISA KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- Primary write-up: How to Fix CVE-2026-25720
*Part of the X3050 bundle. Full procedure at CVE-2026-25720.*