29 matches found
CVE-2026-78556
A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication Man-in-the-Middle attack and to spoof a...
CVE-2026-78557
A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for...
CVE-2026-78557
The Industrial Edge App Publisher (all versions
CVE-2026-78556
A vulnerability exists in Industrial Edge App Publisher (all versions prior to V1.27.9 ) due to improper server certificate validation during TLS connections. This flaw enables a Man-in-the-Middle (MitM) attack, allowing an attacker to intercept and relay communications or spoof a trusted entity ...
CVE-2026-80254
Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...
CVE-2026-80254
Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...
EUVD-2026-70366
Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...
CVE-2026-80254
Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...
CVE-2026-80254
ShizenBox2 (edge-app) , a product by se-digital.net, is affected by an authorization bypass caused by a user-controlled key issue. An attacker with valid credentials can exploit this to change another user's password , resulting in a high integrity impact (CVSS v3.0: 6.5 MEDIUM , CVSS v4.0: 7.1 H...
PT-2026-84972
Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...
CVE-2026-80254: Authorization Bypass Through User-Controlled Key
Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...
Siemens HyperLynx and Industrial Edge App Publisher
SUMMARY Multiple Siemens products are affected by a type confusion vulnerability in Google Chrome prior to 138.0.7204.96. This could allow a remote attacker to perform arbitrary code execution via a crafted HTML page. Siemens has released a new version for Industrial Edge App Publisher and...
EUVD-2024-16586
Malicious code in bioql PyPI...
CVE-2025-1142 IBM Edge Application Manager server-side request forgery
IBM Edge Application Manager 4.5 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
CVE-2024-0799
An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin...
CVE-2024-0800
A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.servlet.ImportNodeServlet...
Siemens Industrial Products
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
VulnCheck KEV: CVE-2024-0800
A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.servlet.ImportNodeServlet...
PT-2024-22564 · Solaredge · Mysolaredge
Name of the Vulnerable Software and Affected Versions: SolarEdge mySolarEdge application version prior to 2.20.1 for Android Description: The issue is related to a certificate verification problem, allowing a Machine-in-the-middle MitM attacker to read and alter all network traffic between the...