Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115)

At­tac­kers are ex­ploi­ting an authen­ti­ca­tion flaw (CVE-2026-58115) in Node-RED, a pro­gram­ming tool built into some in­dus­trial con­trol pro­ducts, to ins­tall a Linux bot and back­doors on un­pro­tec­ted ser­vers, Vuln­Check has found. Node-RED is a flow-based pro­gram­ming tool built on Node.js that lets users wire to­gether event-dri­ven ap­pli­ca­tions in a brow­ser-based edi­tor. It can run on small de­vi­ces such as the Rasp­berry Pi or in the cloud, and it is used in ma­nu­fac­tu­ring, health­ca­re, and home … More → The post At­tac­kers ex­ploit cri­ti­cal Node-RED flaw to de­ploy Linux bot and back­doors (CVE-2026-58115) ap­pea­red first on Help Net Se­cu­rity .