Critical 10.0
CVE-2026-58115
Active Exploitation of Critical Node-RED Vulnerability CVE-2026-58115
Vendor / product: Node-RED, Siemens SIMATIC IoT2050
Event date: 2026-10-30
Public PoC: Yes
First tracked by RiskWire: 2026-11-03
Sources & citations (18)
- 최고 심각도 Node-RED 취약점 악용해 Linux 악성코드 유포 mezha.net · 2026-11-02
- Max-severity bug in widely used OT programming tool exploited to deliver Linux malware theregister.com · 2026-11-02
- Angreifer missbrauchen Siemens SIMATIC IoT2050-Sicherheitslücke für Remote-Backdoors tsecurity.de · 2026-11-03
- Node-RED 严重程度最高的漏洞遭利用,用于投放 Linux 恶意软件 mezha.net · 2026-11-03
- 最重度のNode-RED脆弱性が悪用され、Linuxマルウェアの配布に利用 mezha.net · 2026-11-03
- Attackers Exploit Node-RED Admin API Flaw to Deploy Linux Downloaders and Webshells mallory.ai · 2026-11-02
- Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors tsecurity.de · 2026-11-03
- Уразливість Node-RED найвищого рівня критичності використовують для поширення шкідливого ПЗ для Linux mezha.net · 2026-11-03
- Κρίσιμη ευπάθεια Siemens IoT2050 υπό ενεργή εκμετάλλευση secnews.gr · 2026-11-03
- Una falla crítica en Node-RED abre la puerta a malware de Linux en entornos industriales diariobitcoin.com · 2026-11-03
- Node-RED Remote Code Execution Flaw CVE-2026-58115 with 10.0 CVSS Exploited in the Wild securityonline.info · 2026-11-03
- Siemens IoT2050 Flaw Exploited to Plant Node-RED Backdoors sqmagazine.co.uk · 2026-11-03
- Siemens SIMATIC IoT2050 Vulnerability Exploited to Plant Remote Backdoors privacyneedle.com · 2026-11-03
- Node-RED Vulnerability Exploited to Deploy Linux Bot in Critical Infrastructure uk.headtopics.com · 2026-11-02
- Une faille critique de Node-RED exploitée pour déployer un logiciel malveillant sous Linux mezha.net · 2026-11-02
- Maximum-severity Node-RED flaw exploited to deliver Linux malware mezha.net · 2026-11-03
- Один HTTP-запрос, и Node-RED запускает чужой код. Хакеры атакуют промышленные системы securitylab.ru · 2026-11-03
- 工場IoTのNode-RED無認証API悪用、CVSS 10.0のCVE-2026-58115でLinuxプログラム投入の攻撃を観測 joho-todai.com · 2026-11-03
References
See CVE-2026-58115 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →