CVE-2026-89201: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Siemens RUGGEDCOM CROSSBOW
Description
CVE-2026-89201 is a SQL Injection vulnerability in Siemens RUGGEDCOM CROSSBOW affecting all versions prior to 6.0. The flaw arises from improper validation or sanitization of input in device group or facility names during the Bulk Export workflow. An authenticated attacker with specific privileges could exploit this to execute arbitrary SQL commands on the underlying database. The vulnerability has a high severity rating with a CVSS score of 7.5. No patch or remediation details are currently provided.
CVSS v3.1
Score 7.5high
Affected software
Siemens
RUGGEDCOM CROSSBOW
pkg:github/siemens/ruggedcom-crossbowRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Siemens RUGGEDCOM CROSSBOW (versions before 6.0) involves improper neutralization of special elements used in SQL commands (CWE-89). Specifically, input fields for device group or facility names processed during the Bulk Export workflow are not properly validated or sanitized. This allows an authenticated attacker with limited privileges to perform SQL Injection attacks, potentially leading to arbitrary SQL command execution on the backend database. The CVSS 3.1 score is 7.5, indicating high impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the device's underlying database. This can lead to unauthorized data access, modification, or deletion, impacting confidentiality, integrity, and availability of the system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Bulk Export workflow to trusted users only and monitor for suspicious activity related to device group or facility name inputs.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- siemens
- Date Reserved
- 2026-09-11T07:45:20.919Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6acdfe9e2cdf04f6564c88a5
Added to database: 10/13/2026, 09:49:18 UTC
Last enriched: 10/13/2026, 10:03:12 UTC
Last updated: 10/13/2026, 18:57:34 UTC
Views: 15
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.