Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115)

T2Covered by 1 source · first reported by Help Net Security at 03 Nov, 12:59 UTC

Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and backdoors on unprotected servers, VulnCheck has found. Node-RED is a flow-based programming tool built on Node.js that lets users…