What is GHSA-wp48-pjcp-hmhm?

GHSA-wp48-pjcp-hmhm is a security advisory published by GitHub Security Advisories with High severity. A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \u003c V6.0). Affected devices...

Which CVE IDs does GHSA-wp48-pjcp-hmhm cover?

GHSA-wp48-pjcp-hmhm covers the following CVE IDs: CVE-2026-89197. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wp48-pjcp-hmhm?

GHSA-wp48-pjcp-hmhm has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-wp48-pjcp-hmhmHighCVSS 8.8

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices...

Vendor

GitHub Security Advisories

Published

October 13, 2026

Last Modified

October 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-89197 →

📋 Description

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the underlying database.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-89197
https://cert-portal.siemens.com/productcert/html/ssa-508506.html
https://github.com/advisories/GHSA-wp48-pjcp-hmhm