CVE-2026-89205: Siemens Ruggedcom Crossbow

Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.

Affected products

• Siemens Ruggedcom Crossbow: before V6.0 (fixed in V6.0)

Published 2026-10-13. Last modified 2026-10-15.