search
Node-RED
Trends
- 1Critical Node-RED flaw flagged in Siemens SIMATIC IoT2050 devices▼CVE-2026-58115 – CVSS-B 10 CRITICAL – Siemens SIMATIC IoT2050 devices Node-RED
A new vulnerability, CVE-2026-58115, has been assigned the maximum severity score of 10.0 (CVSS-B, Critical), affecting Node-RED running on Siemens SIMATIC IoT2050 industrial IoT devices. The flaw is catalogued in the NVD. Security professionals are circulating the advisory and urging operators of industrial systems to check whether their deployments are exposed and to apply fixes as they become available.
- 2
A critical vulnerability in Node-RED, the open-source flow-based programming tool, is reportedly being exploited in real-world attacks. Attackers are targeting the flaw to compromise systems running the popular platform, which is widely used for wiring together hardware devices, APIs and online services. Administrators are being urged to check their deployments and apply available updates to limit exposure.
- 3Hackers Exploit Critical Node-RED Flaw to Deploy Botnets●Critical Node-RED Vulnerability Exploited to Deploy Botnets and Webshells Hackers are exploiting a CVSS 10.0 vulnerabili
Attackers are exploiting a maximum-severity vulnerability in Node-RED, tracked as CVE-2026-58115, that allows unauthenticated remote code execution. The flaw is being used to install botnets and webshells on industrial and commercial servers. Security observers are urging organizations running Node-RED instances, particularly on internet-facing systems, to patch immediately and check for signs of compromise.
- 4Attackers exploit critical Node-RED flaw to install backdoors●Attackers install backdoors through a critical vulnerability in Node-RED
Attackers are actively exploiting a critical vulnerability in Node-RED, the open-source flow-based programming tool widely used for industrial and IoT integrations, to install backdoors on compromised servers. Because Node-RED often runs in operational technology and automation environments, successful intrusions could give attackers persistent access to sensitive systems. Administrators are being urged to patch their instances and check for signs of compromise.