How-To Geek on MSN

Node-RED is used to create escape rooms—here's why I use it for my smart home

Go with the flow.
SecurityWeek

Critical Node-RED Flaw Exploited in Attacks

Hackers are exploiting CVE-2026-58115, a critical-severity Node-RED vulnerability, to deploy various payloads.

Freely control SwitchBot just by holding up an NFC tag | Smart Home with iPhone and Node-RED

IntroductionIn the previous article, I introduced how to call the official SwitchBot API from Node-RED installed on a ...
Help Net Security

Attackers exploit critical Node-RED flaw to deploy Linux bot and backdoors (CVE-2026-58115)

Attackers are exploiting an authentication flaw (CVE-2026-58115) in Node-RED, a programming tool built into some industrial control products, to install a Linux bot and backdoors on unprotected ...

[Just in case] The blind spot of "It's fine because it's factory IoT or an internal tool" and what you need to check in Node-RED right now (CVSS 10.0)

In November 2026, an extremely serious security warning was reported regarding "Node-RED," a visual programming tool widely ...
IoT Tech News

Node-RED admin API flaw exploited to drop Linux bots

A VulnCheck canary has caught the first live exploitation of CVE-2026-58115, an unauthenticated Node-RED admin API flaw.
CSO Online

Node-RED authentication hole being exploited in the wild

Siemens revealed and patched the bug in some of its IoT devices in August, yet unpatched systems remain and are still being ...