Vendors and CVEs › CVEs › CVE-2026-89197
CVE-2026-89197: what it is, who is affected and what to do
RUGGEDCOM CROSSBOW has multiple flaws. An attacker could run SQL commands on the database, retrieve administrative credentials, escalate privileges, change configurations or cause denial of service. Siemens has released a new version.
- Scores and exploitation. The stories below cover this flaw together with others, so the Brief does not give its scores here: check the records below.
- Records. CVE-2026-89197 on the National Vulnerability Database · CISA’s known exploited catalog
The story
High
Siemens RUGGEDCOM CROSSBOW flaws allow database commands and privilege escalation
RUGGEDCOM CROSSBOW has multiple flaws. An attacker could run SQL commands on the database, retrieve administrative credentials, escalate privileges, change configurations or cause denial of service.