Open Flow: Node-RED Flaw Under Attack

Attackers are exploiting CVE-2026-58115 to abuse exposed Node-RED interfaces on Siemens SIMATIC IoT2050 devices and run code with maximum privileges. Update to 4.3.4.1 or later, restrict network access, harden authentication, and inspect deployed flows.