Skip to content
OpenAdvisories
Critical · 10.0 Public exploit CVE-2026-58115 EUVD-2026-56119GHSA-mmh6-f99q-64fh

A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4-1 running Industrial OS with No…

Published Aug 11, 2026 · Updated Nov 10, 2026 · Assigned by siemens

Vendor: Siemens Product: SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) Product: SIMATIC IoT2050 Basic (6ES7647-0BA00-0YA2) Product: SIMATIC IoT2050 M.2 (6ES7647-0BB00-1YA2) Product: SIMATIC IoT2050 SM (6ES7647-0CA00-1AA2) Category: ICS / OT

Description

A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4-1 running Industrial OS with Node-RED installed), SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions running Example Image versions with Node-RED installed), SIMATIC IoT2050 Basic (6ES7647-0BA00-0YA2) (All versions < V4.3.4-1 running Industrial OS with Node-RED installed), SIMATIC IoT2050 Basic (6ES7647-0BA00-0YA2) (All versions running Example Image versions with Node-RED installed), SIMATIC IoT2050 M.2 (6ES7647-0BB00-1YA2) (All versions < V4.3.4-1 running Industrial OS with Node-RED installed), SIMATIC IoT2050 M.2 (6ES7647-0BB00-1YA2) (All versions running Example Image versions with Node-RED installed), SIMATIC IoT2050 SM (6ES7647-0CA00-1AA2) (All versions < V4.3.4-1 running Industrial OS with Node-RED installed), SIMATIC IoT2050 SM (6ES7647-0CA00-1AA2) (All versions running Example Image versions with Node-RED installed). Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unauthenticated access to programming nodes that are capable of executing system commands on the server.
This could allow an unauthenticated remote attacker to create malicious flows through the HTTP interface in order to execute arbitrary code on the underlying server with maximum privileges.

Affected products

VendorProductAffectedFixed
Siemens SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) < V4.3.4-1 V4.3.4-1
Siemens SIMATIC IoT2050 Basic (6ES7647-0BA00-0YA2) < V4.3.4-1 V4.3.4-1
Siemens SIMATIC IoT2050 M.2 (6ES7647-0BB00-1YA2) < V4.3.4-1 V4.3.4-1
Siemens SIMATIC IoT2050 SM (6ES7647-0CA00-1AA2) < V4.3.4-1 V4.3.4-1

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 2 repositories

  • foxcornlab/node-red-scanner ★ 2 · Nov 3, 2026

    Detection-only local triage scanner for CVE-2026-58115 (CVSS 10.0) in Siemens SIMATIC IoT2050 Node-RED: grades Industrial OS versions against V4.3.4.1 and settings.js for adminAuth. No payloads, no r…

  • al4n4n/CVE-2026-58115 ★ 1 · Nov 4, 2026

    CVE-2026-58115: Siemens SIMATIC IoT2050 Node-RED unauthenticated root RCE. PoC, scanner, PCAP, detection rules.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 4

References