SQL Injection Vulnerability in RUGGEDCOM CROSSBOW by Siemens

CVE-2026-89200

What is CVE-2026-89200?

A security vulnerability has been discovered in RUGGEDCOM CROSSBOW where the software fails to adequately validate or sanitize user input in the Name and Value fields for custom file labels. This oversight allows an authenticated attacker, who possesses administrative privileges, to perform arbitrary SQL commands on the system's underlying database, potentially compromising data integrity and system operation. Organizations using affected versions should prioritize updating to mitigate the risk of exploitation.

References