Authorization Bypass in RUGGEDCOM CROSSBOW Affects Siemens Devices

CVE-2026-89202

What is CVE-2026-89202?

A significant authorization bypass vulnerability has been discovered in RUGGEDCOM CROSSBOW devices, specifically in all versions prior to 6.0. This flaw permits an authenticated attacker with limited permissions to issue disconnection requests unlawfully. As a result, the attacker can terminate active sessions of other users, including administrators, potentially leading to a Denial of Service condition. Mitigating this vulnerability is crucial to ensuring the integrity and availability of network services.

References