Home / Nov 04, 2026 / Story
0
#8 The Hacker News general November 03, 2026 at 05:34 UTC

Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors

By [email protected] (The Hacker News)

AI Summary

CVE-2026-58115, a maximum-severity (CVSS 10.0) missing-authentication flaw in Siemens SIMATIC IoT2050 Advanced devices, is being actively exploited in the wild to plant remote command backdoors, according to VulnCheck. The vulnerability allows unauthenticated remote attackers to execute arbitrary code on the industrial IoT gateway devices, which are deployed in manufacturing and critical infrastructure environments. ICS/OT security teams should prioritize isolation and patching of SIMATIC IoT2050 Advanced devices as exploitation is confirmed active.

Relevance score: 78.0/100

# More from November 04