CVE-2026-89196

Vendor

Siemens

Product

SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal

CVSS

8.8

EPSS

0.002 (p7)

Exposure class

OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 32
   ICS advisory CISA 9d ago

   Siemens RUGGEDCOM CROSSBOW

   RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform…

   CVSS 3.1 Fix available CVE-2026-89196CVE-2026-89197CVE-2026-89198+8 more Siemens
2. 27
   CVE NVD 18d ago

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an…

   CVSS 8.8 CVE-2026-89196 Siemens