Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
VulnCheck reports active exploitation of CVE-2026-58115, a maximum-severity missing-authentication flaw in Siemens SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED. Attackers deployed malicious Node-RED flows to fetch and execute payloads, while Siemens says versions 4.3.4.1 or later contain a fix.
