CVE Tools
Track your stack

Ruggedcom Crossbow

29 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Ruggedcom Crossbow, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Ruggedcom Crossbow CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Ruggedcom Crossbow CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-071
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-1011
2026-110

Severity

How the 29 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical27%
  • High1552%
  • Medium1138%
  • Low13%

Latest CVEs

The 15 most recently published vulnerabilities affecting Ruggedcom Crossbow.

  1. CVE-2026-89206A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of schedu...6.3
  2. CVE-2026-89205A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operation...6.3
  3. CVE-2026-89204A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an...5.4
  4. CVE-2026-89203A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide...4.3
  5. CVE-2026-89202A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an...6.5
  6. CVE-2026-89201A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the B...7.5
  7. CVE-2026-89200A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. Thi...6.7
  8. CVE-2026-89199A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. Thi...8.8
  9. CVE-2026-89198A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This co...8.8
  10. CVE-2026-89197A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed ...8.8
  11. CVE-2026-89196A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Expor...8.8
  12. CVE-2025-6965Integer Truncation on SQLite7.7
  13. CVE-2024-27947A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The affected systems could allow log messages to be forwarded to a specific client under certain circumstances. An a...5.3
  14. CVE-2024-27946A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). Downloading files overwrites files with the same name in the installation directory of the affected systems. The f...6.5
  15. CVE-2024-27945A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.5). The bulk import feature of the affected systems allow a privileged user to upload files to the root installation dir...7.2

Product grouping is registry-driven, with AI assist and human review. How it works