← Database

CVE-2025-41656

CRITICAL CVSS: 10.0 Published: 2025-07-01 Modified: 2026-06-17

Description

An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the Node_RED server is not configured by default.

Affected Platforms

Unknown

Weakness Type

CWE-306

References