Siemens IoT2050 Advanced devices exploited for remote command backdoors

CVE-2026-58115, a critical missing authentication flaw in Siemens SIMATIC IoT2050 Advanced devices, is under active exploitation. The CVSS 10.0 vulnerability allows unauthenticated remote attackers to execute arbitrary code and establish backdoors. Siemens customers should prioritize patching affected systems and monitor for suspicious command execution activity.