#8
The Hacker News
general
November 03, 2026 at 05:34 UTC
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
By [email protected] (The Hacker News)
AI Summary
CVE-2026-58115, a maximum-severity (CVSS 10.0) missing-authentication flaw in Siemens SIMATIC IoT2050 Advanced devices, is being actively exploited in the wild to plant remote command backdoors, according to VulnCheck. The vulnerability allows unauthenticated remote attackers to execute arbitrary code on the industrial IoT gateway devices, which are deployed in manufacturing and critical infrastructure environments. ICS/OT security teams should prioritize isolation and patching of SIMATIC IoT2050 Advanced devices as exploitation is confirmed active.
Relevance score: 78.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →