Vendors and CVEs › Vendors › Node-RED

Node-RED: industrial cyber security news and vulnerabilities

2 stories in Industrial Cyber Brief name Node-RED, from Tuesday 3 November 2026 to Thursday 5 November 2026. Newest first; each links the full story with who is affected and what to do.

The stories

1. High Thursday 5 November 2026

   Siemens releases fixes for Node-RED flaw on SIMATIC IoT2050

   New: Siemens has released new versions for the affected SIMATIC IoT2050 products. The Node-RED web interface has no authentication, so a remote attacker could create malicious flows and run code with maximum privileges.

2. Critical Tuesday 3 November 2026

   Maximum-severity Node-RED flaw exploited to install Linux malware

   Unknown attackers are exploiting CVE-2026-58115 in Node-RED, a programming tool used in industrial systems.

Related

• Siemens
• Critical infrastructure