Siemens security advisory AV26-802 details control system vulnerabilities
Original title: [Control systems] Siemens security advisory (AV26-802) – Update 1
Open source reporting indicates exploitation in the wild; users should apply updates to affected products.
Siemens released update 1 to advisory AV26-802 listing affected control system products. Open source reporting indicates the vulnerability is exploited in the wild. The Cyber Centre encourages users and administrators to review the advisory and apply updates as they become available.
Unconfirmed: Exploitation status reported via open source
Impact: unauthorized access to control systems
- 1.Apply updates when available
- CVEs
- CVE-2026-58115
- Vendors
- Siemens
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-58115 | A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed) | 10.0 | <1% | PoC |
From the original article
1 min read at cyber.gc.ca
Serial Number: AV26-802 Date: August 11, 2026 Updated: November 3, 2026 As of August 11, 2026, Siemens is affected by vulnerabilities in the following products: Desigo DXR2 Prior to V01. 21. 233.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.