importantSYS.SOURCE: The Hacker News• 2026-11-03T11:04:41+05:30
Critical Authentication Flaw in Siemens SIMATIC IoT2050 Advanced Devices Exploited by Attackers
A critical authentication flaw (CVE-2026-58115) in Siemens SIMATIC IoT2050 Advanced devices allows unauthenticated remote code execution via a CVSS 10.0 vulnerability. Attackers are actively exploiting this flaw to install remote command backdoors.
A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed.
The vulnerability, tracked as CVE-2026-58115 (CVSS score: 10.0), is a case of missing authentication for a critical function that could be exploited by an unauthenticated remote attacker to run arbitrary code.
"SIMATIC IoT2050 Advanced devices running
*** END OF TRANSMISSION ***