CVE-2026-58115
10.0CVSS base score · critical (NVD)
1.0%Chance of exploitation in the next 30 days (FIRST EPSS)
Not in KEVNo confirmed exploitation in CISA's catalog yet
What happened
CVE-2026-58115, a critical missing authentication flaw in Siemens SIMATIC IoT2050 Advanced devices, is under active exploitation. The CVSS 10.0 vulnerability allows unauthenticated remote attackers to execute arbitrary code and establish backdoors. Siemens customers should prioritize patching affected systems and monitor for suspicious command execution activity.
From the Intel60 brief of Nov 3, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- CriticalSiemens IoT2050 Advanced devices exploited for remote command backdoorsNov 3, 2026