Daily OT Security News: October 31, 2026

These five developments are source-verified; the briefings distinguish reported facts from operational considerations. 1. Siemens SSA-443410: Node2Shell in Industrial Edge management applications On October 30, 2026, Siemens ProductCERT published SSA-443410, ‘Node2Shell Vulnerability in Industrial Edge Management Applications,’ for CVE-2026-111497. Siemens rates the issue CVSS v3.1 9.8 and describes a Google Brotli decoder buffer overflow that could let a remote unauthenticated attacker corrupt memory, disclose information, cause denial of service, or potentially execute code using a crafted Brotli-compressed stream. The advisory lists all versions of Industrial Edge Hub, Industrial Edge Management Cloud, and seven Industrial Edge Management applications as affected: Cloud Connector Configurator, Common Configurator on Device, Common Configurator on IEM, Data Flow Monitoring, Databus Configurator, Edge OPC UA Server Configurator, and Flow Creator Configurator. Siemens states the…