CVE-2026-89199

Summary

The RUGGEDCOM CROSSBOW device allows authenticated attackers to access sensitive configuration data through improper database query restrictions, potentially exposing administrative credentials and enabling privilege escalation.

Exploitability

Exploitation requires an authenticated user account with access to the device's management interface, making it moderately difficult to achieve but not highly complex.

Blast radius

If exploited, this vulnerability could allow attackers to gain administrative access to internal systems and potentially compromise the entire network infrastructure managed by the affected devices.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 6.0 or later to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.