Siemens security advisory AV26-802 details control system vulnerabilities
Open source reporting indicates exploitation in the wild; users should apply updates to affected products.
60
Product
SIMATIC IoT2050 Advanced
- Mentions · 7d4
- Mentions · 30d4
- All mentions4
- First seenNov 3, 2026
- Last mentioned15h ago
Timeline
4 articles · newest firstAttackers exploit Node-RED CVE-2026-58115 to deploy Linux bot and backdoors
VulnCheck detects in-the-wild exploitation of CVE-2026-58115 deploying a Linux bot and webshells.
95
Critical Node-RED flaw exploited in attacks
Attackers deploy Linux bots and webshells via single HTTP request; Siemens devices patched.
70
Attackers exploit Siemens IoT2050 missing authentication flaw
VulnCheck observed in-the-wild exploitation of CVE-2026-58115 on Siemens SIMATIC IoT2050 Advanced devices, deploying Node-RED flows that download and run Linux bots.
90
Related CVEs
by mentions- CVE-2026-58115<1%10.0A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed)
Appears with
- Siemensvendor · 4
- Node-REDproduct · 3
- Parasolid V38.1product · 1
- LOGO! Soft Comfortproduct · 1
- bot-linux-amd64malware · 1
- Desigo PXC4product · 1
- Desigo PXC5.E003product · 1
- Parasolid V38.0product · 1
- Desigo PXC7product · 1
- VulnCheckvendor · 1
- Desigo PXC5.E24product · 1
- Linux botmalware · 1
- Desigo DXR2product · 1
- Desigo PXC3product · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.