CISA + vendors
ICS Advisories
Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.
1
Found
Advisory data: live connection— last retrieved: 8 November 2026 at 07:47.
Filters
1 active1 advisories found
SSA-834709
SSA-834709: Missing Authentication Vulnerability in Node-RED on SIMATIC IoT2050 with Industrial OS
Risk evaluation
SIMATIC IoT2050 devices running Industrial OS with Node-RED installed contain a missing authentication vulnerability in the Node-RED HTTP interface that could allow an unauthenticated remote attacker to create malicious flows and execute arbitrary code on the underlying server with maximum privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.
Mitigation summary
Harden the Node-RED installation (see Node-RED User Guide)
Revision history (2)
Initial publication — 11 August 2026
Publication Date
Update A — 4 November 2026
Clarified Affected products list. Updated title. Updated summary.