As cited
Copy frozen at (site build).
vulnerabilities
Siemens Industrial Edge App Publisher
Siemens Industrial Edge App Publisher versions before 1.27.9 contain two vulnerabilities: improper TLS certificate validation (CVE-2026-78556) enabling man-in-the-middle attacks, and insufficient input sanitization in Node.js integration (CVE-2026-78557) permitting remote code execution. Siemens has released version 1.27.9 as a fix and recommends immediate deployment.
Why it matters: Operations teams running Industrial Edge App Publisher in manufacturing, energy, transportation, healthcare, or financial environments need to patch to version 1.27.9 immediately, as network attackers can impersonate the management server and achieve code execution on affected systems.
- Source published
- First seen by Cybersecurity Tracker