← CVE Intelligence

CVE-2026-89196

Siemens / RUGGEDCOM CROSSBOW PUBLISHED

Description (CNA)

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.

Affected (CNA)

Vendor / productVersions
Siemens / RUGGEDCOM CROSSBOWaffected 0 before V6.0

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.