Unauthenticated Access Issue in SIMATIC IoT2050 Advanced by Siemens
CVE-2026-58115

10CRITICAL

Key Information:

Vendor: Siemens
Status: Simatic Iot2050 Advanced
Vendor: CVE Published:; 11 August 2026

Badges

🔥 Trending now📈 Trended📈 Score: 2,100👾 Exploit Exists📰 News Worthy

What is CVE-2026-58115?

CVE-2026-58115 is a serious vulnerability affecting the SIMATIC IoT2050 Advanced device by Siemens, specifically those running any version of the Industrial OS with Node-RED installed prior to version 4.3.4.1. The SIMATIC IoT2050 Advanced is designed for the integration of IoT applications in industrial environments, enabling the collection and processing of data from machines. The nature of this vulnerability lies in the lack of enforced authentication on the Node-RED HTTP interface. As a result, an unauthenticated attacker can gain direct access to programming nodes, which can be exploited to execute arbitrary system commands on the server. This poses a significant threat to organizations utilizing this device, as it opens the door for unauthorized remote access and potential manipulation of critical industrial systems.

Potential impact of CVE-2026-58115

Unauthorized Access and Control: The vulnerability allows attackers to access the programming nodes without authentication, enabling them to create malicious flows. This can lead to unauthorized execution of commands on the underlying system, compromising its integrity and functionality.
Remote Code Execution: By exploiting this vulnerability, attackers can execute arbitrary code with maximum privileges on the affected server. This extreme level of access significantly amplifies the potential for damage, as it allows for the execution of harmful commands that can disrupt operations or compromise sensitive data.
Increased Risk of Cyber Attacks: The availability of this authentication bypass could attract threat actors, heightening the risk of exploitation not only for unauthorized access but also as a vector for deploying additional malware or ransomware attacks within industrial networks. The consequences may extend beyond the immediate systems, potentially impacting the overall security posture of the organization.