CVE-2026-89198
8.8 HIGHPublished 2026-10-13 · Updated 2026-10-15
AI risk analysis
- Summary
- The vulnerability allows authenticated attackers to inject arbitrary SQL commands through improperly sanitized firmware filenames, potentially leading to full database compromise. This affects RUGGEDCOM CROSSBOW devices running versions before V6.0.
- Exploitability
- Exploitation requires an authenticated user with specific privileges and is moderately difficult to achieve, as it involves crafting a malicious firmware filename that triggers SQL injection during the upload process.
- Blast radius
- If exploited, this vulnerability could allow attackers to access sensitive operational data, modify critical configurations, or potentially disrupt industrial operations across multiple RUGGEDCOM CROSSBOW devices in the field.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to firmware version V6.0 or later to remediate this SQL injection vulnerability.
sql-injectionfirmware-uploadindustrial-control
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2015-20122
- HIGHCVE-2022-4997
- CRITICALCVE-2023-54399
- CRITICALCVE-2023-54400PoC
- HIGHCVE-2025-45871PoC
- HIGHCVE-2025-46773
- HIGHCVE-2025-57739
- CRITICALCVE-2025-63564
Related by shared AI tags and CWE weakness class. Browse the full archive.