<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 15 Oct 2026 18:10:24 +0000</lastBuildDate>
    <item>
      <title>b89cf5c5-6911-4362-acbe-19c9913e3f10</title>
      <link>https://vulnerability.circl.lu/sighting/b89cf5c5-6911-4362-acbe-19c9913e3f10/export</link>
      <description>{"uuid": "b89cf5c5-6911-4362-acbe-19c9913e3f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89201", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117432984804964905", "content": "CVE-2026-89201  A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions &amp;lt; V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.\nhttps://www.cve.org/CVERecord?id=CVE-2026-89201https://cert-portal.siemens.com/productcert/html/ssa-508506.html#Siemens #RUGGEDCOMCROSSBOW#CVE_2026_89201#bot", "creation_timestamp": "2026-10-13T09:52:24.641457Z"}</description>
      <content:encoded>{"uuid": "b89cf5c5-6911-4362-acbe-19c9913e3f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89201", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117432984804964905", "content": "CVE-2026-89201  A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions &amp;lt; V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.\nhttps://www.cve.org/CVERecord?id=CVE-2026-89201https://cert-portal.siemens.com/productcert/html/ssa-508506.html#Siemens #RUGGEDCOMCROSSBOW#CVE_2026_89201#bot", "creation_timestamp": "2026-10-13T09:52:24.641457Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b89cf5c5-6911-4362-acbe-19c9913e3f10/export</guid>
      <pubDate>Tue, 13 Oct 2026 09:52:24 +0000</pubDate>
    </item>
  </channel>
</rss>
