CVE-2026-89205

Vendor

Siemens

Product

SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal

CVSS

6.3

EPSS

0.002 (p7)

Exposure class

OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 32
   ICS advisory CISA 9d ago

   Siemens RUGGEDCOM CROSSBOW

   RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform…

   CVSS 3.1 Fix available CVE-2026-89196CVE-2026-89197CVE-2026-89198+8 more Siemens
2. 20
   CVE NVD 18d ago

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

   A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an…

   CVSS 6.3 CVE-2026-89205 Siemens