KEV Entry

CVE-2026-58115

Known Exploited Vulnerability Entry ENISA

Back to Catalog View Vulnerability
Entry Details
Withdrawn Not Exploited
Withdrawn assertion. ENISA no longer stands behind this claim (since 2026-11-10). The entry is kept as a tombstone so mirrors can discover the withdrawal; it is not part of the current KEV set, and it does not prove that exploitation never occurred (GCVE BCP-07).

CVE-2026-58115

2026-11-10 08:00 UTC

Timestamps

2026-11-03

2026-11-03

Scope

Affected: Siemens / SIMATIC IoT2050 | Description: A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4-1 running Industrial OS with Node-RED installed), SIMATIC IoT2050 Basic (6ES7647-0BA00-0YA2) (All versions < V4.3.4-1 running Industrial OS with Node-RED installed), SIMATIC IoT2050 M.2 (6ES7647-0BB00-1YA2) (All versions < V4.3.4-1 running Industrial OS with Node-RED installed), SIMATIC IoT2050 SM (6ES7647-0CA00-1AA2) (All versions < V4.3.4-1 running Industrial OS with Node-RED installed). Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unauthenticated access to programming nodes that are capable of executing system commands on the server. This could allow an unauthenticated remote attacker to create malicious flows through the HTTP interface in order to execute arbitrary code on the underlying server with maximum privileges. | Patched since: 2026/08/11 | Exploitation type: unknown | CWEs: CWE-306 | Origin source: CNW | Notes: https://cert-portal.siemens.com/productcert/html/ssa-834709.html | Withdrawn: no longer listed in the ENISA CNW EU KEV catalog as of 2026-11-10.

References
  • {'id': 'CVE-2026-58115', 'url': 'https://www.cve.org/CVERecord?id=CVE-2026-58115'}
  • {'id': 'EUVD-2026-56119', 'url': 'https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56119'}
  • {'id': 'source', 'url': 'https://cert-portal.siemens.com/productcert/html/ssa-834709.html'}

792382ea-9327-4e9e-b7fb-1a369e11d057

ENISA
cce329bf-df49-4c6e-a027-80be2e6483bd

2026-11-05 15:00 UTC

2026-11-10 08:00 UTC

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
csirt_report enisa-cnw-kev successful_exploitation 0.75
View details 
{
  "catalog": "ENISA / EU CSIRTs Network (CNW) KEV JSON",
  "cwes": [
    "CWE-306"
  ],
  "dateReported": "2026/11/03",
  "euvd": "EUVD-2026-56119",
  "exploitationType": [
    "unknown"
  ],
  "notes": "https://cert-portal.siemens.com/productcert/html/ssa-834709.html",
  "originSource": "CNW",
  "patchedSince": "2026/08/11",
  "product": "SIMATIC IoT2050",
  "threatActorsExploiting": [],
  "vendorProject": "Siemens",
  "vulnerabilityName": ""
}
 -
Export Options
JSON Object JSON API View Full Catalog