CVE-2026-58115: One web request is enough to hack unpatched Siemens industrial devices

Not listed so far in CISA’s catalog of actively exploited vulnerabilities.

Our analyses

One web request is enough to hack unpatched Siemens industrial devices

Flaw CVE-2026-58115 stems from Node-RED, a programming tool installed without a password on these devices. VulnCheck has observed attacks since October 30. Here are the update and the checks to run.

Nov 5, 20262 min read

What to do

Check whether your estate includes the affected product, including internet-facing devices.
Apply the vendor’s patch or mitigations (references below).
Watch for exploitation: this entry is updated if the vulnerability enters the exploited catalog or is the subject of a CERT-FR alert.

References

NVD entry (NIST)