Months after Siemens released fixes for an authentication hole in flow-based programming tool Node-RED, it remains unpatched by many users and attackers are taking advantage of it in the wild. The problem involves open source IoT/IIoT systems, including those embedded in critical infrastructure, deployed outside the control of CISOs and CIOs.... Weiterlesen: Node-RED authentication hole being exploited in the wild
Intelligence View
⚡ tsecurity.de Intelligence
Node-RED authentication hole being exploited in the wild
Months after Siemens released fixes for an authentication hole in flow-based programming tool Node-RED, it remains unpatched by many users and attackers are…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
15 Quellen
Denial of Service in mingw-qt6-qt5compat (Fedora)
14 weitere Quellen
PPro-Linux Securityvor 1 Std.Pufferüberlauf in mingw-harfbuzz (Fedora) PPro-Linux Securityvor 1 Std.Pufferüberlauf in mingw-qt5-qtwebkit (Fedora) PPro-Linux Securityvor 1 Std.Denial of Service in ags (Fedora) VVulDB Updatesvor 4 Std.CVE-2022-48492 | Huawei EMUI/Magic UI Configuration denial of service (EUVD-2022-51188) VVulDB Updatesvor 4 Std.CVE-2022-48493 | Huawei EMUI/Magic UI Configuration denial of service (EUVD-2022-51189) VVulDB Updatesvor 4 Std.CVE-2022-48497 | Huawei EMUI/Magic UI Configuration denial of service (EUVD-2022-51193)
+8
11 Quellen
CVE-2024-36978 | Linux Kernel up to 6.10-rc2 sch_multiq multiq_tune out-of-bounds write (affc18fdc694 / Nessus ID 207802)
10 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2026-64312 | Linux Kernel up to 7.1.3 pcrypt pcrypt_aead_done improper synchronization (Nessus ID 375470) VVulDB Updatesvor 5 Std.CVE-2026-74684 | Linux Kernel up to 6.18.44/7.1.8 tap tap_get_user_xdp null pointer dereference (Nessus ID 375470) VVulDB Updatesvor 4 Std.CVE-2024-46852 | Linux Kernel up to 6.1.110/6.6.51/6.10.10 dma-buf off-by-one (Nessus ID 208099 / WID-SEC-2025-0477) VVulDB Updatesvor 4 Std.CVE-2026-99269 | Linux Kernel up to 7.2.13 sched_ext race condition (Nessus ID 375613) VVulDB Updatesvor 4 Std.CVE-2026-99258 | Linux Kernel up to 6.12.114/6.18.58/7.2.12 hyperv hv_apicid_to_vp_index allocation of resources (Nessus ID 375610) VVulDB Updatesvor 4 Std.CVE-2026-99256 | Linux Kernel up to 7.2.12 dm cache cache_resume locking (Nessus ID 375609)
+4
11 Quellen
CVE-2026-119375 | SQLite up to 3.53.x WAL substr information disclosure (Nessus ID 375476)
10 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2026-119378 | SQLite up to 3.53.x R-Tree extension nodeWrite use after free (Nessus ID 375476) VVulDB Updatesvor 4 Std.CVE-2022-48495 | Huawei EMUI/Magic UI information disclosure (EUVD-2022-51191) VVulDB Updatesvor 4 Std.CVE-2024-38200 | Microsoft Office/365 Apps for Enterprise information disclosure (EDB-52113) VVulDB Updatesvor 3 Std.CVE-2024-45717 | SolarWinds Platform up to 2024.4 Search/Node Information Section cross site scripting (Nessus ID 212063) VVulDB Updatesvor 3 Std.CVE-2024-52940 | AnyDesk up to 8.1.0 on Windows Allow Direct Connection information disclosure ZZDI: Published Advisoriesvor 1 TagZDI-26-853: Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4318113/it-security-nachrichten/node-red-authentication-hole-being-exploited-in-the-wild/