CVE-2026-89204

Vendor

Siemens

Product

SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal

CVSS

5.4

EPSS

0.002 (p7)

Exposure class

OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 32
   ICS advisory CISA 9d ago

   Siemens RUGGEDCOM CROSSBOW

   RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform…

   CVSS 3.1 Fix available CVE-2026-89196CVE-2026-89197CVE-2026-89198+8 more Siemens
2. 20
   CVE NVD 18d ago

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read…

   CVSS 5.4 CVE-2026-89204 Siemens