https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 13:39:42 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-89199 <p>A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions &lt; V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.</p> <p>A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions &lt; V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-89199 https://vulnerability.circl.lu/vuln/ghsa-cjf3-3mcw-2vg2 <p>A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions &lt; V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.</p> <p>A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions &lt; V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.</p> https://vulnerability.circl.lu/vuln/ghsa-cjf3-3mcw-2vg2 https://vulnerability.circl.lu/vuln/ncsc-2026-0415 NCSC-2026-0415 https://vulnerability.circl.lu/vuln/ncsc-2026-0415 https://vulnerability.circl.lu/vuln/ssa-508506 <p>RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service.</p> <p>Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version.</p> <p>RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service.</p> <p>Siemens has released a new version for RUGGEDCOM CROSSBOW and recommends to update to the latest version.</p> https://vulnerability.circl.lu/vuln/ssa-508506