Vendors and CVEs › CVEs › CVE-2026-58115
CVE-2026-58115: what it is, who is affected and what to do
Unknown attackers are exploiting CVE-2026-58115 in Node-RED, a programming tool used in industrial systems. Affected Siemens devices do not require login on the web interface, so attackers can create flows that download and run a Linux bot.
- Known exploited. Not on CISA’s list when reported.
- CVSS. 10.0, as the source states.
- EPSS. <1% chance of exploitation in the next 30 days, when reported.
- Records. CVE-2026-58115 on the National Vulnerability Database · CISA’s known exploited catalog
The story
Critical
Maximum-severity Node-RED flaw exploited to install Linux malware
Unknown attackers are exploiting CVE-2026-58115 in Node-RED, a programming tool used in industrial systems.