Authorization Flaw in RUGGEDCOM CROSSBOW by Siemens

CVE-2026-89206

What is CVE-2026-89206?

A vulnerability exists in RUGGEDCOM CROSSBOW that fails to enforce appropriate server-side authorization checks when handling requests to modify scheduled actions. This weakness enables an authenticated individual with limited privileges to manipulate scheduled tasks, potentially allowing them to retry, halt, or delete these tasks without valid authorization. Organizations using affected versions should take immediate action to mitigate risks associated with unauthorized changes to critical scheduled operations.

References