Siemens SIMATIC IoT2050 Node-RED flaw exploited to drop Linux bot payloads
CVE-2026-58115, a critical missing-authentication flaw in Node-RED on Siemens SIMATIC IoT2050 devices, is being exploited in the wild. VulnCheck caught opportunistic attacks on its canaries that tried to pull down a Linux bot binary. Update to V4.3.4-1 or later now.
CVE-2026-581152 min