{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Siemens RUGGEDCOM CROSSBOW: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/siemens--ruggedcom-crossbow/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/siemens--ruggedcom-crossbow/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89201/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89201/",
   "title": "CVE-2026-89201 · Siemens RUGGEDCOM CROSSBOW · disclosed",
   "content_text": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.",
   "date_published": "2026-10-13T09:19:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89199/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89199/",
   "title": "CVE-2026-89199 · Siemens RUGGEDCOM CROSSBOW · disclosed",
   "content_text": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal systems, leading to unauthorized information disclosure and privilege escalation.",
   "date_published": "2026-10-13T09:19:03Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89198/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89198/",
   "title": "CVE-2026-89198 · Siemens RUGGEDCOM CROSSBOW · disclosed",
   "content_text": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.",
   "date_published": "2026-10-13T09:19:01Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89197/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89197/",
   "title": "CVE-2026-89197 · Siemens RUGGEDCOM CROSSBOW · disclosed",
   "content_text": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.",
   "date_published": "2026-10-13T09:19:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89196/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89196/",
   "title": "CVE-2026-89196 · Siemens RUGGEDCOM CROSSBOW · disclosed",
   "content_text": "A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.",
   "date_published": "2026-10-13T09:18:59Z"
  }
 ]
}