Access Control Weakness in RUGGEDCOM CROSSBOW by Siemens
CVE-2026-89199

8.7HIGH

Key Information:

Vendor

Siemens
Status
Ruggedcom Crossbow
Vendor
CVE Published:
13 October 2026

What is CVE-2026-89199?

A vulnerability has been discovered in RUGGEDCOM CROSSBOW, which affects all versions prior to V6.0. This vulnerability allows authenticated users to bypass security measures and gain access to sensitive configuration items through specific database queries. Consequently, attackers may leverage this weakness to extract administrative credentials associated with various internal systems, resulting in unauthorized information disclosure and potential privilege escalation.

Affected Version(s)

RUGGEDCOM CROSSBOW 0

References

https://cert-portal.siemens.com/productcert/html/ssa-5085...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.