← Back to Vulnerability Reports CVE Intelligence

CVE-2026-58115

See advisory•CRITICAL · CVSS 10• In the wild

What is CVE-2026-58115?

A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unauthenticated access to programming nodes that are capable of executing system commands on the server. This could allow an unauthenticated remote attacker to create malicious flows through the HTTP interface in order to execute arbitrary code on the underlying server with maximum privileges.

CVSS10 NVD 3.1
SeverityCRITICAL
Exploitation In the wild
EPSS1% · P61
Triage statusActive Exploit
ActionPatch within 48 hours
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWECWE-306
NVD published2026-08-11
NVD last modified2026-10-23

Timeline

  • 2026-08-11Published to the U.S. National Vulnerability Database (NVD)
  • 2026-10-23NVD record last updated

Affected product

See advisory

Remediation Steps

  1. Identify all Siemens SIMATIC IoT2050 Advanced devices in your environment
  2. Obtain and apply the latest security patch from Siemens
  3. Restrict network access to affected devices to trusted networks only
  4. Monitor for any unauthorized command execution or suspicious activity
  5. Verify patch application and confirm device functionality post-update

References

Referenced in our briefings & reports

Related vulnerabilities

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.