Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
VulnCheck reported active exploitation of CVE-2026-58115, a CVSS 10.0 missing-authentication flaw in the Node-RED HTTP interface on Siemens SIMATIC IoT2050 Advanced devices running Industrial OS, which Siemens disclosed in an August 2026 advisory and fixed...