CVE-2026-89205

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with minimal privileges to schedule unauthorized operations on devices.

• CWE-602

• https://cert-portal.siemens.com/productcert/html/ssa-508506.html

Published

Oct 13, 2026

Last Modified

Oct 15, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8920Improper Restriction of Communication Channel to Intended En…8.5
• CVE-2026-89200A vulnerability has been identified in RUGGEDCOM CROSSBOW (A…6.7
• CVE-2026-89201A vulnerability has been identified in RUGGEDCOM CROSSBOW (A…7.5
• CVE-2026-89202A vulnerability has been identified in RUGGEDCOM CROSSBOW (A…6.5
• CVE-2026-89203A vulnerability has been identified in RUGGEDCOM CROSSBOW (A…4.3
• CVE-2026-89204A vulnerability has been identified in RUGGEDCOM CROSSBOW (A…5.4
• CVE-2026-89206A vulnerability has been identified in RUGGEDCOM CROSSBOW (A…6.3
• CVE-2026-89207A vulnerability has been identified in WTV676-HB6035 Web Int…6.5
• CVE-2026-89208A vulnerability has been identified in Capital Embedded AR C…5.3
• CVE-2026-89209A vulnerability has been identified in Mendix SAML (Mendix 1…6.8
• CVE-2026-8921External Control of File Name or Path vulnerability in ASUS …8.5
• CVE-2026-89212A flaw resulting in XML external entity (XXE) was found in A…8.6