# Siemens RUGGEDCOM CROSSBOW vulnerabilities Source: https://junglewise.ai/threats/technologies/ruggedcom-crossbow Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/ruggedcom-crossbow.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 13 vulnerabilities in Siemens RUGGEDCOM CROSSBOW: 0 in the last 7 days and 11 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-89206, was published on 13 October 2026. 11 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 11 - All time: 13 (2 critical, 0 exploited in the wild) ## About Siemens RUGGEDCOM CROSSBOW Industrial control software application for network management and communication in industrial environments. ## Latest Siemens RUGGEDCOM CROSSBOW vulnerabilities - [CVE-2026-89206: Siemens RUGGEDCOM CROSSBOW authorization bypass in scheduled actions](https://junglewise.ai/threats/cve-2026-89206-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (medium, CVSS 6.3, published 13 Oct 2026) - [CVE-2026-89205: Siemens RUGGEDCOM CROSSBOW authorization bypass and SQL injection](https://junglewise.ai/threats/cve-2026-89205-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (medium, CVSS 6.3, published 13 Oct 2026) - [CVE-2026-89204: Siemens RUGGEDCOM CROSSBOW SQL injection in database queries](https://junglewise.ai/threats/cve-2026-89204-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (medium, CVSS 5.4, published 13 Oct 2026) - [CVE-2026-89203: Siemens RUGGEDCOM CROSSBOW privilege escalation and SQL injection](https://junglewise.ai/threats/cve-2026-89203-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (medium, CVSS 4.3, published 13 Oct 2026) - [CVE-2026-89202: Siemens RUGGEDCOM CROSSBOW authorization bypass in session disconnection](https://junglewise.ai/threats/cve-2026-89202-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-89201: Siemens RUGGEDCOM CROSSBOW SQL injection in Bulk Export](https://junglewise.ai/threats/cve-2026-89201-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (high, CVSS 7.5, published 13 Oct 2026) - [CVE-2026-89200: Siemens RUGGEDCOM CROSSBOW SQL injection in custom file labels](https://junglewise.ai/threats/cve-2026-89200-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (medium, CVSS 6.7, published 13 Oct 2026) - [CVE-2026-89199: Siemens RUGGEDCOM CROSSBOW improper access restriction](https://junglewise.ai/threats/cve-2026-89199-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-89198: Siemens RUGGEDCOM CROSSBOW SQL injection in firmware filename](https://junglewise.ai/threats/cve-2026-89198-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-89197: Siemens RUGGEDCOM CROSSBOW SQL injection in notification conditions](https://junglewise.ai/threats/cve-2026-89197-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-89196: Siemens RUGGEDCOM CROSSBOW SQL injection and authorization flaws](https://junglewise.ai/threats/cve-2026-89196-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2025-6965: SQLite memory corruption via aggregate term overflow](https://junglewise.ai/threats/cve-2025-6965-sqlite-memory-corruption-via-aggregate-term-overflow) (critical, CVSS 9.8, published 15 Jul 2025) - [CVE-2024-3596: RADIUS Protocol MD5 collision forgery attack (Blast-RADIUS)](https://junglewise.ai/threats/cve-2024-3596-radius-protocol-md5-collision-forgery-attack-blast-radius) (critical, CVSS 9, published 9 Jul 2024) ## Most severe Siemens RUGGEDCOM CROSSBOW vulnerabilities - [CVE-2025-6965: SQLite memory corruption via aggregate term overflow](https://junglewise.ai/threats/cve-2025-6965-sqlite-memory-corruption-via-aggregate-term-overflow) (critical, CVSS 9.8, published 15 Jul 2025) - [CVE-2024-3596: RADIUS Protocol MD5 collision forgery attack (Blast-RADIUS)](https://junglewise.ai/threats/cve-2024-3596-radius-protocol-md5-collision-forgery-attack-blast-radius) (critical, CVSS 9, published 9 Jul 2024) - [CVE-2026-89198: Siemens RUGGEDCOM CROSSBOW SQL injection in firmware filename](https://junglewise.ai/threats/cve-2026-89198-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-89197: Siemens RUGGEDCOM CROSSBOW SQL injection in notification conditions](https://junglewise.ai/threats/cve-2026-89197-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-89196: Siemens RUGGEDCOM CROSSBOW SQL injection and authorization flaws](https://junglewise.ai/threats/cve-2026-89196-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-89199: Siemens RUGGEDCOM CROSSBOW improper access restriction](https://junglewise.ai/threats/cve-2026-89199-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-89201: Siemens RUGGEDCOM CROSSBOW SQL injection in Bulk Export](https://junglewise.ai/threats/cve-2026-89201-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (high, CVSS 7.5, published 13 Oct 2026) - [CVE-2026-89200: Siemens RUGGEDCOM CROSSBOW SQL injection in custom file labels](https://junglewise.ai/threats/cve-2026-89200-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (medium, CVSS 6.7, published 13 Oct 2026) - [CVE-2026-89202: Siemens RUGGEDCOM CROSSBOW authorization bypass in session disconnection](https://junglewise.ai/threats/cve-2026-89202-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-89206: Siemens RUGGEDCOM CROSSBOW authorization bypass in scheduled actions](https://junglewise.ai/threats/cve-2026-89206-a-vulnerability-has-been-identified-in-ruggedcom-crossbow-all) (medium, CVSS 6.3, published 13 Oct 2026) ## Vulnerabilities per week 11 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 11 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Siemens technologies - [Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP](https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-1518-4-pn-dp-mfp): 204 vulnerabilities - [Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP](https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-1518f-4-pn-dp-mfp): 83 vulnerabilities - [Siemens SIMATIC CN 4100](https://junglewise.ai/threats/technologies/simatic-cn-4100): 79 vulnerabilities - [Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP](https://junglewise.ai/threats/technologies/siplus-s7-1500-cpu-1518-4-pn-dp-mfp): 70 vulnerabilities - [Siemens RUGGEDCOM APE1808](https://junglewise.ai/threats/technologies/ruggedcom-ape1808): 28 vulnerabilities - [Siemens Ruggedcom Rox II](https://junglewise.ai/threats/technologies/ruggedcom-rox-ii): 16 vulnerabilities - [Siemens RUGGEDCOM RST2428P](https://junglewise.ai/threats/technologies/ruggedcom-rst2428p): 16 vulnerabilities - [Siemens ROX II](https://junglewise.ai/threats/technologies/rox-ii): 14 vulnerabilities - [Siemens SINEC OS](https://junglewise.ai/threats/technologies/sinec-os): 12 vulnerabilities - [Siemens Solid Edge](https://junglewise.ai/threats/technologies/solid-edge): 12 vulnerabilities - [Siemens SIMATIC Drive Controller CPU 1504D TF](https://junglewise.ai/threats/technologies/simatic-drive-controller-cpu-1504d-tf): 11 vulnerabilities - [Siemens SIMATIC Drive Controller CPU 1507D TF](https://junglewise.ai/threats/technologies/simatic-drive-controller-cpu-1507d-tf): 11 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Siemens RUGGEDCOM CROSSBOW vulnerabilities", https://junglewise.ai/threats/technologies/ruggedcom-crossbow, 13 November 2026.