PT-2026-32609 · Siemens · Ruggedcom Crossbow Secure Access Manager Primary

Published 2026-04-14 · Updated 2026-04-22 · CVE-2026-27668

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) versions prior to 5.8

Description User Administrators are permitted to administer groups to which they belong. This flaw allows an authenticated User Administrator to escalate their privileges and grant themselves access to any device group at any access level.

Recommendations Update to version 5.8 or later.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

BDU:2026-05802

CVE-2026-27668

Affected Products

Ruggedcom Crossbow Secure Access Manager Primary

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-27668 · Security Note
• https://bdu.fstec.ru/vul/2026-05802 · Security Note
• https://twitter.com/windowsforum/status/2046638243412627869 · Twitter Post
• https://cert-portal.siemens.com/productcert/html/ssa-741509.html · Note
• https://twitter.com/windowsforum/status/2046638310370537617 · Twitter Post
• https://twitter.com/SecurityAr58409/status/2046756381760368667 · Twitter Post
• https://twitter.com/CveFindCom/status/2043988538480349382 · Twitter Post
• https://twitter.com/ptdbugs/status/2043988866382627317 · Twitter Post
• https://twitter.com/vuldb/status/2044054637066801642 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2044039342205624763 · Twitter Post