{"schema_version":1,"title":"Siemens RUGGEDCOM CROSSBOW vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in Siemens RUGGEDCOM CROSSBOW: 0 in the last 7 days and 11 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-89206, was published on 13 October 2026. 11 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/ruggedcom-crossbow","json_url":"https://junglewise.ai/threats/technologies/ruggedcom-crossbow.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/ruggedcom-crossbow","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":5,"all_time":13,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":11,"last_365_days":11},"latest":[{"cve":"CVE-2026-89206","cvss":6.3,"epss":0.0028,"slug":"cve-2026-89206-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW authorization bypass in scheduled actions","severity":"medium","exploited":false,"published_at":"2026-10-13T10:17:22.523+00:00","url":"https://junglewise.ai/threats/cve-2026-89206-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89205","cvss":6.3,"epss":0.0028,"slug":"cve-2026-89205-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW authorization bypass and SQL injection","severity":"medium","exploited":false,"published_at":"2026-10-13T10:17:22.373+00:00","url":"https://junglewise.ai/threats/cve-2026-89205-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89204","cvss":5.4,"epss":0.0023,"slug":"cve-2026-89204-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW SQL injection in database queries","severity":"medium","exploited":false,"published_at":"2026-10-13T10:17:22.087+00:00","url":"https://junglewise.ai/threats/cve-2026-89204-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89203","cvss":4.3,"epss":0.003,"slug":"cve-2026-89203-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW privilege escalation and SQL injection","severity":"medium","exploited":false,"published_at":"2026-10-13T10:17:21.93+00:00","url":"https://junglewise.ai/threats/cve-2026-89203-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89202","cvss":6.5,"epss":0.0037,"slug":"cve-2026-89202-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW authorization bypass in session disconnection","severity":"medium","exploited":false,"published_at":"2026-10-13T10:17:21.79+00:00","url":"https://junglewise.ai/threats/cve-2026-89202-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89201","cvss":7.5,"epss":0.0039,"slug":"cve-2026-89201-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW SQL injection in Bulk Export","severity":"high","exploited":false,"published_at":"2026-10-13T10:17:21.65+00:00","url":"https://junglewise.ai/threats/cve-2026-89201-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89200","cvss":6.7,"epss":0.0018,"slug":"cve-2026-89200-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW SQL injection in custom file labels","severity":"medium","exploited":false,"published_at":"2026-10-13T10:17:21.5+00:00","url":"https://junglewise.ai/threats/cve-2026-89200-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89199","cvss":8.8,"epss":0.0034,"slug":"cve-2026-89199-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW improper access restriction","severity":"high","exploited":false,"published_at":"2026-10-13T10:17:21.353+00:00","url":"https://junglewise.ai/threats/cve-2026-89199-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89198","cvss":8.8,"epss":0.0042,"slug":"cve-2026-89198-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW SQL injection in firmware filename","severity":"high","exploited":false,"published_at":"2026-10-13T10:17:21.2+00:00","url":"https://junglewise.ai/threats/cve-2026-89198-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89197","cvss":8.8,"epss":0.0042,"slug":"cve-2026-89197-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW SQL injection in notification conditions","severity":"high","exploited":false,"published_at":"2026-10-13T10:17:21.06+00:00","url":"https://junglewise.ai/threats/cve-2026-89197-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89196","cvss":8.8,"epss":0.0042,"slug":"cve-2026-89196-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW SQL injection and authorization flaws","severity":"high","exploited":false,"published_at":"2026-10-13T10:17:20.92+00:00","url":"https://junglewise.ai/threats/cve-2026-89196-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2025-6965","cvss":9.8,"epss":0.7255,"slug":"cve-2025-6965-sqlite-memory-corruption-via-aggregate-term-overflow","title":"SQLite memory corruption via aggregate term overflow","severity":"critical","exploited":false,"published_at":"2025-07-15T14:15:31.08+00:00","url":"https://junglewise.ai/threats/cve-2025-6965-sqlite-memory-corruption-via-aggregate-term-overflow"},{"cve":"CVE-2024-3596","cvss":9,"slug":"cve-2024-3596-radius-protocol-md5-collision-forgery-attack-blast-radius","title":"RADIUS Protocol MD5 collision forgery attack (Blast-RADIUS)","severity":"critical","exploited":false,"published_at":"2024-07-09T12:15:20.7+00:00","url":"https://junglewise.ai/threats/cve-2024-3596-radius-protocol-md5-collision-forgery-attack-blast-radius"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","slug":"simatic-s7-1500-cpu-1518-4-pn-dp-mfp","vulnerabilities":204,"url":"https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-1518-4-pn-dp-mfp"},{"name":"Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","slug":"simatic-s7-1500-cpu-1518f-4-pn-dp-mfp","vulnerabilities":83,"url":"https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-1518f-4-pn-dp-mfp"},{"name":"Siemens SIMATIC CN 4100","slug":"simatic-cn-4100","vulnerabilities":79,"url":"https://junglewise.ai/threats/technologies/simatic-cn-4100"},{"name":"Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","slug":"siplus-s7-1500-cpu-1518-4-pn-dp-mfp","vulnerabilities":70,"url":"https://junglewise.ai/threats/technologies/siplus-s7-1500-cpu-1518-4-pn-dp-mfp"},{"name":"Siemens RUGGEDCOM APE1808","slug":"ruggedcom-ape1808","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/ruggedcom-ape1808"},{"name":"Siemens Ruggedcom Rox II","slug":"ruggedcom-rox-ii","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/ruggedcom-rox-ii"},{"name":"Siemens RUGGEDCOM RST2428P","slug":"ruggedcom-rst2428p","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/ruggedcom-rst2428p"},{"name":"Siemens ROX II","slug":"rox-ii","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/rox-ii"},{"name":"Siemens SINEC OS","slug":"sinec-os","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/sinec-os"},{"name":"Siemens Solid Edge","slug":"solid-edge","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/solid-edge"},{"name":"Siemens SIMATIC Drive Controller CPU 1504D TF","slug":"simatic-drive-controller-cpu-1504d-tf","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/simatic-drive-controller-cpu-1504d-tf"},{"name":"Siemens SIMATIC Drive Controller CPU 1507D TF","slug":"simatic-drive-controller-cpu-1507d-tf","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/simatic-drive-controller-cpu-1507d-tf"}],"technology":{"hub":true,"name":"Siemens RUGGEDCOM CROSSBOW","slug":"ruggedcom-crossbow","vendor":{"hub":true,"name":"Siemens","slug":"siemens","url":"https://junglewise.ai/threats/vendors/siemens"},"aliases":[],"category":"software-application","homepage":"https://www.siemens.com/ruggedcom","description":"Industrial control software application for network management and communication in industrial environments.","url":"https://junglewise.ai/threats/technologies/ruggedcom-crossbow"},"most_severe":[{"cve":"CVE-2025-6965","cvss":9.8,"epss":0.7255,"slug":"cve-2025-6965-sqlite-memory-corruption-via-aggregate-term-overflow","title":"SQLite memory corruption via aggregate term overflow","severity":"critical","exploited":false,"published_at":"2025-07-15T14:15:31.08+00:00","url":"https://junglewise.ai/threats/cve-2025-6965-sqlite-memory-corruption-via-aggregate-term-overflow"},{"cve":"CVE-2024-3596","cvss":9,"slug":"cve-2024-3596-radius-protocol-md5-collision-forgery-attack-blast-radius","title":"RADIUS Protocol MD5 collision forgery attack (Blast-RADIUS)","severity":"critical","exploited":false,"published_at":"2024-07-09T12:15:20.7+00:00","url":"https://junglewise.ai/threats/cve-2024-3596-radius-protocol-md5-collision-forgery-attack-blast-radius"},{"cve":"CVE-2026-89198","cvss":8.8,"epss":0.0042,"slug":"cve-2026-89198-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW SQL injection in firmware filename","severity":"high","exploited":false,"published_at":"2026-10-13T10:17:21.2+00:00","url":"https://junglewise.ai/threats/cve-2026-89198-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89197","cvss":8.8,"epss":0.0042,"slug":"cve-2026-89197-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW SQL injection in notification conditions","severity":"high","exploited":false,"published_at":"2026-10-13T10:17:21.06+00:00","url":"https://junglewise.ai/threats/cve-2026-89197-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89196","cvss":8.8,"epss":0.0042,"slug":"cve-2026-89196-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW SQL injection and authorization flaws","severity":"high","exploited":false,"published_at":"2026-10-13T10:17:20.92+00:00","url":"https://junglewise.ai/threats/cve-2026-89196-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89199","cvss":8.8,"epss":0.0034,"slug":"cve-2026-89199-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW improper access restriction","severity":"high","exploited":false,"published_at":"2026-10-13T10:17:21.353+00:00","url":"https://junglewise.ai/threats/cve-2026-89199-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89201","cvss":7.5,"epss":0.0039,"slug":"cve-2026-89201-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW SQL injection in Bulk Export","severity":"high","exploited":false,"published_at":"2026-10-13T10:17:21.65+00:00","url":"https://junglewise.ai/threats/cve-2026-89201-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89200","cvss":6.7,"epss":0.0018,"slug":"cve-2026-89200-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW SQL injection in custom file labels","severity":"medium","exploited":false,"published_at":"2026-10-13T10:17:21.5+00:00","url":"https://junglewise.ai/threats/cve-2026-89200-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89202","cvss":6.5,"epss":0.0037,"slug":"cve-2026-89202-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW authorization bypass in session disconnection","severity":"medium","exploited":false,"published_at":"2026-10-13T10:17:21.79+00:00","url":"https://junglewise.ai/threats/cve-2026-89202-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"},{"cve":"CVE-2026-89206","cvss":6.3,"epss":0.0028,"slug":"cve-2026-89206-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all","title":"Siemens RUGGEDCOM CROSSBOW authorization bypass in scheduled actions","severity":"medium","exploited":false,"published_at":"2026-10-13T10:17:22.523+00:00","url":"https://junglewise.ai/threats/cve-2026-89206-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}