PoC Index85,103 CVEs with PoCs

CVE-2025-41656

Pilz: Missing Authentication in Node-RED integration

CRITICAL 10.0EPSS 12.4%

An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the Node_RED server is not configured by default.

Affected
Pilz · IndustrialPI 4 with Firmware Bullseye
CVSS v3.1 CERT
10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
12.35% chance of exploitation in the next 30 days, 96th percentile
Published
2025-07-01

Proof-of-concept exploits (1)

References