Critical Node-RED Flaw Exploited in Attacks
Teaser from the source
Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells. The post Critical Node-RED Flaw Exploited in Attacks appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Node-RED
Other advisories
- CriticalCVE-2026-58115Node-RED missing adminAuth actively exploited to drop bots and webshells (CVE-2026-58115)
- Not ratedosv:CVE-2026-77052Missing Authentication for Node-RED in boneIO
- HighCVE-2026-77052boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. The Node-RED Admin API allows deploying …
- MediumCVE-2026-82932mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED,…
- Not ratedosv:CVE-2026-67443FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution)
- HighCVE-2026-71269Node-red: Pfadüberschreitung (Path Traversal)
- HighCVE-2026-71269Das lokale Dateisystem-Lagermodul von Node-RED (getLibraryEntry() und saveLibraryEntry() in packages/node_modules/@node-red/runtime/lib/storage/localfilesystem/library.
- Not ratedosv:MAL-2026-2845Malicious code in node-red-contrib-yolo-object-detection (npm)
Other news entries
Source: https://www.securityweek.com/critical-node-red-flaw-exploited-in-attacks/
ID