CVE-2026-89205

MEDIUM

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operation...

Affects 0 products across 1 vendor.

CVSS 3.16.3
CVSS v45.3
EPSS0.3%
Percentile19th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component.
CWE Weakness Definitions
CWE-602: CWE-602
Related Attack Patterns (CAPEC)
CAPEC-31 Accessing/Intercepting/Modifying HTTP Cookies
via CWE-602
CAPEC-162 Manipulating Hidden Fields
via CWE-602
CAPEC-208 Removing/short-circuiting 'Purse' logic: removing/mutating 'cash' decrements
via CWE-602
CAPEC-383 Harvesting Information via API Event Monitoring
via CWE-602
CAPEC-385 Transaction or Event Tampering via Application API Manipulation
via CWE-602
Show all 12

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A medium severity vulnerability (CVE-2026-89205) affects the target system. A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with mi...

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-89205?
A medium severity vulnerability (CVE-2026-89205) affects the target system. A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with mi...
What is the CVSS score for CVE-2026-89205?
CVE-2026-89205 has CVSS 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. EPSS: 0.3%.
Is CVE-2026-89205 actively exploited?
No confirmed active exploitation of CVE-2026-89205 as of 2026-10-15.
How do I remediate CVE-2026-89205?
Apply vendor patches for CVE-2026-89205. Monitor Siemens advisories.
What systems are affected by CVE-2026-89205?
CVE-2026-89205 affects Siemens.
Vulnerability Details
CVE IDCVE-2026-89205
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Published2026-10-13
Last Modified2026-10-13
ICS Relevance65%
Weakness (CWE)
CWE-602
SourceNVD
Official Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.

Source: NIST NVD / MITRE CVE Database

Affected Products
VendorProductAffected Versions
Siemens — —
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
Related CVEs affecting Siemens
CVE-2020-11896 10.0 The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related ... CVE-2021-31891 10.0 A vulnerability has been identified in Desigo CC (All versions with OIS Exten... CVE-2007-1917 10.0 Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library... CVE-2021-37181 10.0 A vulnerability has been identified in Cerberus DMS V4.0 (All versions), Cerb... CVE-2024-45032 10.0 A vulnerability has been identified in Industrial Edge Management Pro (All ve...
View all Siemens CVEs →

Monitoring Siemens Vulnerabilities in Your Environment?

BreachSpider tracks every Siemens CVE and maps them to your ICS assets automatically. Get email or webhook alerts when a newly published Siemens vulnerability matches your assets.

Create a free account →