Privilege Escalation Vulnerability in RUGGEDCOM CROSSBOW Secure Access Manager

CVE-2026-27668

What is CVE-2026-27668?

A privilege escalation vulnerability exists in the RUGGEDCOM CROSSBOW Secure Access Manager Primary, impacting all versions prior to V5.8. This flaw allows an authenticated User Administrator to manage groups to which they belong. Consequently, a malicious user could exploit this capability to escalate their privileges, enabling them to access any device group at any access level. This not only compromises the integrity of user administration but also potentially exposes sensitive devices and operations to unauthorized access.

References