CVE-2026-58115

Vendor

Siemens

Product

SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal, Smart home / IoT platforms

CVSS

10.0

Exposure class

OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 26
   CISA advisory CISA 25 Aug 2026

   Siemens SIMATIC IoT2050 Advanced

   SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed contain a missing authentication vulnerability in the Node-RED HTTP interface that could allow an unauthenticated remote attacker to create malicious…

   CVSS 3.1 Fix available CVE-2026-58115 Siemens
2. 23
   CVE NVD 11 Aug 2026

   A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED…

   A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do not enforce authentication on the Node-RED HTTP…

   CVSS 10.0 CVE-2026-58115 Siemens
3. 29
   News The Register 1h ago

   Max-severity bug in widely used OT programming tool exploited to deliver Linux malware

   Your industrial IoT gateway isn't exposed to the internet, right? RIGHT?!

   CVE-2026-58115CVE-2019-17558