securityweek.com/critical-node-red-flaw-exploited-in-attacks Critical Node-RED Flaw Exploited in Attacks
VulnCheck says attackers have exploited CVE-2026-58115, a critical Node-RED missing-authentication flaw that can let unauthenticated remote attackers execute code with maximum privileges. Siemens found the issue in SIMATIC IoT2050 Advanced devices and says version 4.3.4.1 and later include patches.
