CVE-2026-89204

MEDIUMCVSS 5.4

Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized information disclosure and data manipulation.

Timeline

Published:October 13th, 2026 10:17 AM

Last modified:October 15th, 2026 8:38 PM

CVSS Scoring

CVSS v3: 5.4 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weaknesses (CWE)

CWE-639

References & Reports

Advisories, patches, and third-party reports

https://cert-portal.siemens.com/productcert/html/ssa-508506.html

Source: NIST NVD · Data may lag official sources by up to one minute