Hackers are exploiting CVE-2026-58115, a critical-severity Node-RED vulnerability, to deploy various payloads.
In November 2026, an extremely serious security warning was reported regarding "Node-RED," a visual programming tool widely ...
A VulnCheck canary has caught the first live exploitation of CVE-2026-58115, an unauthenticated Node-RED admin API flaw.
Attackers exploit CVE-2026-58115 in Siemens SIMATIC IoT2050 devices to deploy Linux bot payloads and command execution backdoors.
IntroductionIn the previous article, I introduced how to call the official SwitchBot API from Node-RED installed on a ...
Unknown criminals are exploiting a maximum-severity vulnerability in Node-RED, a flow-based programming tool that is widely used in critical infrastructure, to deploy a flow that downloads and runs a ...
Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and backdoors on unprotected ...
Siemens revealed and patched the bug in some of its IoT devices in August, yet unpatched systems remain and are still being ...