CVE-2026-89205

MEDIUM Status: Received

CVSS Scores

CVSS v3.x Base Score
6.3
MEDIUM

Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.

Published
October 13, 2026 10:17 AM
Last Modified
October 13, 2026 11:17 AM
Source
[email protected]

Weaknesses (CWE)

CWE-602

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry