CVE-2026-118527

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 2, 2026

Last Seen

November 3, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Node-RED Flaw Exploited to Deploy Linux Malware75.0

A critical vulnerability, CVE-2026-58115, in Node-RED has been to deploy Linux malware on Siemens SIMATIC IoT2050 Advanced devices. The flaw, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to create malicious flows that execute arbitrary code. VulnCheck reported that on Octobe...

Ivanti Connect Secure Vulnerabilities Exploited for Root Access72.8

A group identified as UTA0576 has exploited three vulnerabilities in Ivanti Connect Secure VPN gateways, allowing unauthenticated root-level access. The attacks began in early October 2026, affecting devices that were fully patched at the time. The vulnerabilities include CVE-2026-104935 (authentica...