What is GHSA-m4gx-65g7-f4vm?

GHSA-m4gx-65g7-f4vm is a security advisory published by GitHub Security Advisories with High severity. A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V6.0). Affected devices...

Which CVE IDs does GHSA-m4gx-65g7-f4vm cover?

GHSA-m4gx-65g7-f4vm covers the following CVE IDs: CVE-2026-89198. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m4gx-65g7-f4vm?

GHSA-m4gx-65g7-f4vm has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-m4gx-65g7-f4vmHighCVSS 8.8

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices...

Vendor

GitHub Security Advisories

Published

October 13, 2026

Last Modified

October 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-89198 →

📋 Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-89198
https://cert-portal.siemens.com/productcert/html/ssa-508506.html
https://github.com/advisories/GHSA-m4gx-65g7-f4vm