CVE-2026-27668 - Vulnerability Analysis

Overview

RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) < V5.8 contains a broken access control vulnerability caused by User Administrators being able to administer groups they belong to, letting authenticated User Administrators escalate privileges to any device group, exploit requires authenticated User Administrator privileges.

Severity & Score

Impact

Authenticated User Administrators can escalate privileges to access any device group at any access level.

Mitigation

Update to version 5.8 or later.

References

• https://cert-portal.siemens.com/productcert/html/ssa-741509.html

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner