High Patch available CVSS up to 8.8
Siemens RUGGEDCOM CROSSBOW flaws allow database commands and privilege escalation
CISA ICS AdvisoriesSiemens · Critical Manufacturing, Transportation Systems, EnergyCVE-2026-89196, CVE-2026-89197, CVE-2026-89198
What happened. RUGGEDCOM CROSSBOW has multiple flaws. An attacker could run SQL commands on the database, retrieve administrative credentials, escalate privileges, change configurations or cause denial of service. Siemens has released a new version.
Who is affected. Users of Siemens RUGGEDCOM CROSSBOW versions before 6.0. Listed sectors include critical manufacturing, transportation, energy and healthcare.
What to do. Check whether you run RUGGEDCOM CROSSBOW before 6.0, and update to the latest version Siemens has released.
Editor's reading
Forasset ownerOT security lead
- Purdue level
- L3.5
- L3
Why: CROSSBOW is a server-based access management product that sits between corporate and operational networks, so it lies in the industrial DMZ or site operations layer.
- Are you exposed?
Check your asset inventory for RUGGEDCOM CROSSBOW installations running a version below 6.0.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: CISA ICS Advisories (opens cisa.gov)
More on Siemens Manufacturing Transport Energy and power CVE-2026-89196 CVE-2026-89197 CVE-2026-89198