Security · 3 November 2026
Siemens Node-RED vulnerability (CVE‑2026‑58115) exploited for Linux bot
A max‑severity (CVSS 10) CVE‑2026‑58115 in Node‑RED allows unauthenticated attackers to create malicious flows that execute shell commands on Siemens SIMATIC IoT2050 devices; researchers documented the exploit last Friday.
Why it matters
Add mandatory authentication to the Node‑RED HTTP interface on OT gateways; users will expect secure programming nodes.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 3 Nov →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.