Vulnerabilities

TI-2026-71594 CVE-2026-89206 · GHSA-6wcc-w6xv-44j3

Siemens RUGGEDCOM CROSSBOW missing server-side checks on scheduled tasks

LOW 23

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00173 Published 2026-10-13 Fixed in V6.0 CWE-602

TI-2026-71593 CVE-2026-89205 · GHSA-8g74-rfwv-m253

Missing server-side authorization in RUGGEDCOM CROSSBOW scheduling

LOW 23

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00173 Published 2026-10-13 Fixed in V6.0 CWE-602

TI-2026-71592 CVE-2026-89204 · GHSA-8qvm-fj3x-mrmr

Missing authorization checks in Siemens RUGGEDCOM CROSSBOW subnet queries

LOW 23

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00142 Published 2026-10-13 Fixed in V6.0 CWE-639

TI-2026-71591 CVE-2026-89203 · GHSA-432w-69jv-r59x

Siemens RUGGEDCOM CROSSBOW Exposes System-Wide Data to Authenticated Users

LOW 23

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00182 Published 2026-10-13 Fixed in V6.0 CWE-201

TI-2026-71590 CVE-2026-89202 · GHSA-93m5-29fc-fvm2

Missing authorization checks in Siemens RUGGEDCOM CROSSBOW

LOW 31

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00217 Published 2026-10-13 Fixed in V6.0 CWE-639

TI-2026-71589 CVE-2026-89201 · GHSA-84qj-482m-vxjx

SQL injection in RUGGEDCOM CROSSBOW Bulk Export workflow

LOW 35

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00236 Published 2026-10-13 Fixed in V6.0 CWE-89

TI-2026-71588 CVE-2026-89200 · GHSA-83r2-p444-6pj7

SQL injection in Siemens RUGGEDCOM CROSSBOW custom file labels

LOW 37

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

CVSS 4.0HIGH 8.4 Local High privileges No interaction EPSS 0.00142 Published 2026-10-13 Fixed in V6.0 CWE-89

TI-2026-71587 CVE-2026-89199 · GHSA-cjf3-3mcw-2vg2

Authorization bypass in Siemens RUGGEDCOM CROSSBOW exposes admin credentials

LOW 39

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00249 Published 2026-10-13 Fixed in V6.0 CWE-639

TI-2026-71586 CVE-2026-89198 · GHSA-m4gx-65g7-f4vm

SQL injection in Siemens RUGGEDCOM CROSSBOW via firmware filenames

LOW 39

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00304 Published 2026-10-13 Fixed in V6.0 CWE-89

TI-2026-71585 CVE-2026-89197 · GHSA-wp48-pjcp-hmhm

SQL injection in Siemens RUGGEDCOM CROSSBOW notification profiles

LOW 39

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00298 Published 2026-10-13 Fixed in V6.0 CWE-89

TI-2026-71584 CVE-2026-89196 · GHSA-mwv8-v6cw-hqg7

SQL injection in Siemens RUGGEDCOM CROSSBOW Bulk Import/Export

LOW 39

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00298 Published 2026-10-13 Fixed in V6.0 CWE-89

Vulnerabilities

Filters