What is CVE-2026-58115?

CVE-2026-58115 is a critical-severity vulnerability in Siemens Simatic Iot2050 Advanced, classified under Missing Authentication for Critical Function. CVSS score: 10.0/10. Published 2026-08-11.

How severe is CVE-2026-58115?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Auth bypass in Siemens Simatic Iot2050 Advanced

CVE-2026-58115

A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do not enforce authentication on the Node-RED HTTP interface, al…

Vulnerability class: Broken Authentication

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Siemens Simatic Iot2050 Advanced — versions 0

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

productcert@siemens.com

Frequently asked questions

What is CVE-2026-58115?: CVE-2026-58115 is a critical-severity vulnerability in Siemens Simatic Iot2050 Advanced, classified under Missing Authentication for Critical Function. CVSS score: 10.0/10. Published 2026-08-11.
How severe is CVE-2026-58115?: Critical severity. CVSS v3 base score is 10.0 out of 10.