CVE-2026-78557

A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for...

CVE-2026-78556

A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication Man-in-the-Middle attack and to spoof a...

CVE-2026-78557

The Industrial Edge App Publisher (all versions

CVE-2026-78556

A vulnerability exists in Industrial Edge App Publisher (all versions prior to V1.27.9 ) due to improper server certificate validation during TLS connections. This flaw enables a Man-in-the-Middle (MitM) attack, allowing an attacker to intercept and relay communications or spoof a trusted entity ...

CVE-2026-78556

A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication Man-in-the-Middle attack and to spoof a...

PT-2026-111390

Name of the Vulnerable Software and Affected Versions Industrial Edge App Publisher versions prior to V1.27.9 Description The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Due to the front end integration with Node.js,...

CVE-2026-78557: Improper Neutralization of Input During Web Page Generation

A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for...

CVE-2026-78556: Improper Certificate Validation

A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication Man-in-the-Middle attack and to spoof a...

PT-2026-111389

Name of the Vulnerable Software and Affected Versions Industrial Edge App Publisher versions prior to V1.27.9 Description The software fails to properly validate the server certificate during the initiation of a TLS connection. This flaw enables a Man-in-the-Middle attack, where an attacker can...

Siemens Industrial Edge App Publisher

SUMMARY The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the management server and execute...

Siemens HyperLynx and Industrial Edge App Publisher

SUMMARY Multiple Siemens products are affected by a type confusion vulnerability in Google Chrome prior to 138.0.7204.96. This could allow a remote attacker to perform arbitrary code execution via a crafted HTML page. Siemens has released a new version for Industrial Edge App Publisher and...