Node-RED

Attackers weaponize Siemens IoT2050 flaw to deploy botnet

Attackers are weaponizing CVE-2026-58115, a CVSS 10.0 missing-auth flaw in Node-RED on Siemens IoT2050 devices, to deploy Linux bots and persistent backdoors.