CVE-2026-89206mediumCWE-602

CVE-2026-89206: medium-severity vulnerability in Siemens RUGGEDCOM CROSSBOW

Published

Follow this CVE+ Monitor RUGGEDCOM CROSSBOW

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.2%
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
Siemens · RUGGEDCOM CROSSBOW
Related CVEs — Siemens RUGGEDCOM CROSSBOW

In the same product, most dangerous first.

CVE-2024-27944HIGHCVE-2024-27944EPSS 1.4%CVE-2024-27945HIGHCVE-2024-27945EPSS 1.4%CVE-2024-27943HIGHCVE-2024-27943EPSS 1.3%CVE-2023-37372CRITICALCVE-2023-37372EPSS 0.9%CVE-2024-27946MEDIUMCVE-2024-27946EPSS 0.9%CVE-2023-27411HIGHCVE-2023-27411EPSS 0.8%