Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors

A maximum-severity flaw in Siemens SIMATIC IoT2050 Advanced devices, tracked as CVE-2026-58115 with a CVSS score of 10.0, has come under active exploitation, VulnCheck has found, The Hacker News reports. The missing-authentication flaw could let an unauthenticated remote attacker run arbitrary code on the industrial IoT gateways.