CVE-2026-78556

Vendor

Siemens

Product

SIMATIC / RUGGEDCOM / SINEC / SCALANCE / WinCC / TIA Portal

CVSS

7.4

EPSS

0.003 (p24)

Exposure class

Developer platform, OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 32
   ICS advisory CISA 9d ago

   Siemens Industrial Edge App Publisher

   The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the…

   CVSS 3.1 Fix available CVE-2026-78556CVE-2026-78557 Node.js Siemens
2. 27
   CVE NVD 18d ago

   A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9).

   A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to…

   CVSS 7.4 CVE-2026-78556 Siemens