CVE-2026-58115
Critical
Description
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unauthenticated access to programming nodes that are capable of executing system commands on the server. This could allow an unauthenticated remote attacker to create malicious flows through the HTTP interface in order to execute arbitrary code on the underlying server with maximum privileges.
SeverityCritical
CVSS10.0
Exploit probability—
ProductSIMATIC IoT2050 Advanced
PublishedAug 11, 2026
First seenAug 11, 2026
Weakness typeCWE-306Missing authentication for critical function
How to fix
Update
- Siemens SIMATIC IoT2050 AdvancedV4.3.4.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens SIMATIC IoT2050 Advanced | v < V4.3.4.1 | V4.3.4.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.