CVE-2026-27668CWE-266

A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8)

High · published April 14, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
34.9
In the wild
Unconfirmed
What it is

A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8). User Administrators are allowed to administer groups they belong to. This could allow an authenticated User Administrator to escalate their own privileges and grant themselves access to any device group at any access level.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00417 · 34.9th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2026-04-14T08:40Z
EPSS history
Timeline
  • 14 APR 08:40Z
    A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8)
    cvelistv5