42 matches found
CVE-2026-78556
A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication Man-in-the-Middle attack and to spoof a...
CVE-2026-78557
A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for...
EUVD-2026-98391
A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for...
CVE-2026-78557
A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for...
CVE-2026-78557
The Industrial Edge App Publisher (all versions
CVE-2026-78557
A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for...
CVE-2026-78556
A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication Man-in-the-Middle attack and to spoof a...
CVE-2026-78556
A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication Man-in-the-Middle attack and to spoof a...
CVE-2026-78556
A vulnerability exists in Industrial Edge App Publisher (all versions prior to V1.27.9 ) due to improper server certificate validation during TLS connections. This flaw enables a Man-in-the-Middle (MitM) attack, allowing an attacker to intercept and relay communications or spoof a trusted entity ...
EUVD-2026-98390
A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication Man-in-the-Middle attack and to spoof a...
PT-2026-111389
Name of the Vulnerable Software and Affected Versions Industrial Edge App Publisher versions prior to V1.27.9 Description The software fails to properly validate the server certificate during the initiation of a TLS connection. This flaw enables a Man-in-the-Middle attack, where an attacker can...
PT-2026-111390
Name of the Vulnerable Software and Affected Versions Industrial Edge App Publisher versions prior to V1.27.9 Description The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Due to the front end integration with Node.js,...
CVE-2026-78556: Improper Certificate Validation
A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication Man-in-the-Middle attack and to spoof a...
Siemens Industrial Edge App Publisher
SUMMARY The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the management server and execute...
CVE-2026-78557: Improper Neutralization of Input During Web Page Generation
A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for...
Siemens Industrial Edge App Publisher encryption vulnerability
Versions of the Siemens Industrial Edge App Publisher prior to V1.27.9 have a security vulnerability. This vulnerability stems from the incorrect verification of server certificates when initiating TLS connections. It may lead to man-in-the-middle attacks, allowing attackers to intercept and rela...
Siemens Industrial Edge App Publisher Cross-site Scripting Vulnerability
Versions of the Siemens Industrial Edge App Publisher prior to V1.27.9 have a cross-site scripting vulnerability. This vulnerability arises from rendering data received from the backend without proper cleaning and escaping, which may allow arbitrary JavaScript code to be executed, thereby enablin...
CVE-2026-80254
Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...
CVE-2026-80254
ShizenBox2 (edge-app) , a product by se-digital.net, is affected by an authorization bypass caused by a user-controlled key issue. An attacker with valid credentials can exploit this to change another user's password , resulting in a high integrity impact (CVSS v3.0: 6.5 MEDIUM , CVSS v4.0: 7.1 H...