Siemens Simatic Iot2050 Advanced vulnerabilities
2 vulnerabilities
Known vulnerabilities in Siemens Simatic Iot2050 Advanced, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2026-58115siemens · simatic_iot2050_advanced_firmwaresiemens simatic_iot2050_advanced_firmwareA vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed). Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unauthenticated access to programming nodes that are capable of executing system commands on the server.
This could allow an unauthenticated remote attacker to create malicious flows through the HTTP interface in order to execute arbitrary code on the underlying server with maximum privileges.CVSS10.0CriticalEPSS0.89%Act nowCVE-2026-31431Linux · Kernel +367 moreLinux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityIn the Linux kernel, the following vulnerability has been resolved:
crypto: algif_aead - Revert to operating out-of-place
This mostly reverts commit 72548b093ee3 except for the copying of
the associated data.
There is no benefit in operating in-place in algif_aead since the
source and destination come from different mappings. Get rid of
all the complexity added for in-place operation and just copy the
AD directly.CVSS7.8HighKEVEPSS98.11%