CVE-2026-89200

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)

Risk score: 47/100
CVSS: 6.7 v3.1
Exploit chance (30 days): 0.2%
Published: 13 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying…
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 6.7 medium
Named in a government or vendor bulletin

Government and vendor bulletins

Siemens RUGGEDCOM CROSSBOW

References

https://cert-portal.siemens.com/productcert/html/ssa-508506.html

Original description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands on the underlying database.

Last activity 22 Oct 2026. Patch Forecast updates every hour.