CVE-2026-77052 - Missing Authentication for Node-RED in boneIO
CVE ID :CVE-2026-77052 Published : Oct. 26, 2026, 3:16 p.m. | 1 hour, 6 minutes ago Description :boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. The Node-RED Admin API allows deploying flows that can execute arbitrary system...