Ruggedcom Crossbow

Mentions · 7d1
Mentions · 30d2
All mentions2
First seenOct 14, 2026
Last mentioned3d ago

Timeline

2 articles · newest first

RUGGEDCOM CROSSBOW before 6.0 allows SQL injection and credential theft

Authenticated attackers can run SQL, steal admin credentials, or change configuration; Siemens says to update to V6.0 or later.

CISA AdvisoriesOct 22, 12:00 UTC · 3d agoVulnerabilityCVE-2026-89196 CVE-2026-89197 CVE-2026-89198+8

ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw

Siemens issued 17 ICS advisories, and Rockwell patched a critical unauthenticated ArmorBlock takeover flaw.

SecurityWeekOct 14, 15:15 UTC · 11d agoVulnerability2

Related CVEs

by mentions

CVE-2026-891998.7
Credential disclosure via database queries in RUGGEDCOM CROSSBOW
published 12d agoSiemens RUGGEDCOM CROSSBOW
CVE-2026-891988.7
SQL injection via firmware filename in RUGGEDCOM CROSSBOW
published 12d agoSiemens RUGGEDCOM CROSSBOW
CVE-2026-891968.7
SQL injection in Siemens RUGGEDCOM CROSSBOW import
published 12d agoSiemens RUGGEDCOM CROSSBOW
CVE-2026-891978.7
Authenticated SQL injection in Siemens RUGGEDCOM CROSSBOW
published 12d agoSiemens RUGGEDCOM CROSSBOW
CVE-2026-892008.4
SQL injection in Siemens RUGGEDCOM CROSSBOW
published 12d agoSiemens RUGGEDCOM CROSSBOW
CVE-2026-892017.7
Authenticated SQL injection in Siemens RUGGEDCOM CROSSBOW
published 12d agoSiemens RUGGEDCOM CROSSBOW
CVE-2026-892027.1
Session Disconnect Authorization Bypass in Siemens RUGGEDCOM CROSSBOW
published 12d agoSiemens RUGGEDCOM CROSSBOW
CVE-2026-892045.3
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
published 12d ago
CVE-2026-892065.3
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
published 12d ago
CVE-2026-892035.3
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)
published 12d ago

Appears with

Siemensvendor · 2
Sage RTUproduct · 1
ABBvendor · 1
CISAorganization · 1
Rockwell Automationvendor · 1
Simatic S7-1500product · 1
Harmony STW6product · 1
Johnson Controlsvendor · 1
CERT@VDEorganization · 1
Pro-face STW6000product · 1
1732E ArmorBlockproduct · 1
dynovaPROproduct · 1
Hitachi Energyvendor · 1
Honeywellvendor · 1
Schneider Electricvendor · 1
Moxavendor · 1

Entities are extracted by the model from each article. First seen Oct 14, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.