Siemens Industrial Edge App Publisher

Plan PatchCVSS 8.3ICS-CERT ICSA-26-295-02Oct 13, 2026

SiemensManufacturing

Attack path

Attack VectorNetwork

Auth RequiredNone

ComplexityHigh

User InteractionRequired

Summary

The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the management server and execute arbitrary code (RCE) on the local machine through Node.js integration. Siemens has released an update for the Industrial Edge App Publisher and recommends to update to the latest version.

What this means

What could happen

Could allow an attacker to inject malicious scripts into management interfaces

Who's at risk

Organizations in manufacturing using Siemens equipment

How it could be exploited

Attacker on the corporate network or internet could reach this device without any credentials

Exploitability

Unlikely to be exploited - EPSS score 0.4%

Affected products (1)

ProductAffected VersionsFix Status

Industrial Edge App Publisher < V1.27.9< 1.27.91.27.9

Remediation & Mitigation

0/1

Schedule - requires maintenance window

0/1

Patching may require device reboot, plan for process interruption

UPGRADEUpdate to V1.27.9 or later version

CVEs (2)

CVE-2026-78556 CVE-2026-78557

View full CISA ICS-CERT advisory

↑↓ Navigate · Esc Close

API: /api/v1/advisories/61399326-fe78-429e-95af-9fe1c9c98080

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.