What is GHSA-6wcc-w6xv-44j3?

GHSA-6wcc-w6xv-44j3 is a security advisory published by GitHub Security Advisories with Medium severity. A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V6.0). Affected devices...

Which CVE IDs does GHSA-6wcc-w6xv-44j3 cover?

GHSA-6wcc-w6xv-44j3 covers the following CVE IDs: CVE-2026-89206. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6wcc-w6xv-44j3?

GHSA-6wcc-w6xv-44j3 has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

GHSA-6wcc-w6xv-44j3MediumCVSS 6.3

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices...

Vendor

GitHub Security Advisories

Published

October 13, 2026

Last Modified

October 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-89206 →

📋 Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delete scheduled tasks without proper authorization.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-89206
https://cert-portal.siemens.com/productcert/html/ssa-508506.html
https://github.com/advisories/GHSA-6wcc-w6xv-44j3