SecurityWeek

Critical Node-RED Flaw Exploited in Attacks

Hackers are exploiting CVE-2026-58115, a critical-severity Node-RED vulnerability, to deploy various payloads.
The Hacker News

Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors

Attackers exploit CVE-2026-58115 in Siemens SIMATIC IoT2050 devices to deploy Linux bot payloads and command execution backdoors.

[Just in case] The blind spot of "It's fine because it's factory IoT or an internal tool" and what you need to check in Node-RED right now (CVSS 10.0)

In November 2026, an extremely serious security warning was reported regarding "Node-RED," a visual programming tool widely ...
Help Net Security

Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115)

Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and backdoors on unprotected ...
IoT Tech News

Node-RED admin API flaw exploited to drop Linux bots

A VulnCheck canary has caught the first live exploitation of CVE-2026-58115, an unauthenticated Node-RED admin API flaw.