HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-89197 — A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)....

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.

Analysis

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database. CVSS Score: 8.8. Published: 2026-10-13T10:17:21.060.

Indicators of Compromise (1)

CVE (1)
CVE-2026-89197
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 13, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

Siemens RUGGEDCOM CROSSBOW

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-12.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthoriz

CVE-2026-89196CVE-2026-89197
CISA Advisories
MEDIUMVulnerabilityNEW

US FCC Votes to Cut Off Device Testing in China by 2028

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/us-fcc-votes-to-cut-off-device-testing-in-china-by-2028-image_small-5-a-33251.jpg" align=right hspace=4><b>Carr Says Labs See Sensitive Product Details Months Before Devices Launch</b><br>The U.S. Federal Communications Commission voted Thursday to stop recognizing test labs in China and other countries that won’t accept American

Bank Info Security
MEDIUMVulnerabilityNEW

Leaked DHS employee archive, Icepick, faces challenges to stay online

A DHS contractor requested its removal, while a social media site blocked links to it. It was offline for a spell before finding a new home. The post Leaked DHS employee archive, Icepick, faces challenges to stay online appeared first on CyberScoop .

CyberScoop