Vulnerability
CVE-2019-17558
NVD has not published a description yet.
CVSS score–Not scored
Exploited in the wild
On CISA KEV list
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
CISA says: Apply updates per vendor instructions.
Show me how to fix itTimeline
- Added to CISA known exploited list
- First covered by RedTeamDaily
Coverage
Maximum-severity Node-RED flaw CVE-2026-58115 exploited to deliver Linux bot
CVE-2026-58115, rated 10 out of 10 on CVSS, affects Node-RED, including Siemens SIMATIC IoT2050 devices, where the HTTP interface does not enforce authentication. Unauthenticated attackers can deploy a malicious flow that runs shell commands as soon as it is deployed. VulnCheck observed one IP address target the flaw 16 times between 30 October and 1 November, with one payload pointing to a separate server that hosts a Linux bot.
Sources: NVD and CISA known exploited vulnerabilities catalogue.