Critical Siemens IoT Device Vulnerability Actively Exploited

A critical vulnerability, CVE-2026-58115, in Siemens SIMATIC IoT2050 Advanced devices is being actively exploited by attackers. The flaw, a missing authentication issue in the Node-RED HTTP interface, allows unauthenticated remote attackers to execute arbitrary code with maximum privileges. Siemens disclosed the vulnerability in August and has provided patches in versions 4.3.4.1 and later, urging users to update immediately to mitigate active threats.