Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #12
Hackers Exploit Critical Node-RED Flaw to Deploy Botnets
Original: Critical Node-RED Vulnerability Exploited to Deploy Botnets and Webshells Hackers are exploiting a CVSS 10.0 vulnerabili
Attackers are exploiting a maximum-severity vulnerability in Node-RED, tracked as CVE-2026-58115, that allows unauthenticated remote code execution. The flaw is being used to install botnets and webshells on industrial and commercial servers. Security observers are urging organizations running Node-RED instances, particularly on internet-facing systems, to patch immediately and check for signs of compromise.
Why now: A CVSS 10.0 flaw actively exploited against industrial servers demands urgent patching, driving security community discussion.
Node-REDCVE-2026-58115OpenJS Foundation
Evidence
- Critical Node-RED Vulnerability Exploited to Deploy Botnets and Webshells Hackers are exploiting a CVSS 10.0 vulnerability in Node-RED (CVE-2026-58115) to deploy botnets and webshells on industrial and commercial servers. The flaw allows unauthenticated remote code execution by… · beyondmachines1@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/4865767