CVE-2026-78556

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication (Man-in-the-Middle attack) and to spoof a trusted entity by interfering in the communication path between the client and the intended server.

Score
CVSS 4.0 7.6 High
Status
Awaiting Analysis - productcert@siemens.com
Published
2026-10-13
Last modified
2026-10-16
Weaknesses
CWE-295

Affected products

References

 
 
© AVABIS GmbH privacypolicy about