Tag: CVE-2026-58115

A flow editor with no password handed attackers root on industrial gear

A maximum-severity hole in Node-RED's HTTP interface is now drawing working exploits that end in a memory-resident bot.