CVE-2026-78556
Received Received - Intake

Industrial Edge App Publisher TLS Certificate Validation Bypass

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: siemens-SADP

Description
A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication (Man-in-the-Middle attack) and to spoof a trusted entity by interfering in the communication path between the client and the intended server.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-78556
EUVD
EUVD-2026-98390

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Siemens Industrial Edge App Publisher 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-295 The product does not validate, or incorrectly validates, a certificate.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-78556 is a vulnerability in Siemens Industrial Edge App Publisher (all versions before V1.27.9). It allows attackers to intercept and manipulate communication between the client and server by not properly validating server certificates during TLS connections. This can lead to impersonating a trusted entity.

Detection Guidance

Detecting this vulnerability requires checking if your Industrial Edge App Publisher version is below V1.27.9. Use the application's interface or logs to verify the installed version. Network monitoring tools can detect unusual TLS interception attempts or man-in-the-middle activities.

Impact Analysis

This vulnerability enables Man-in-the-Middle attacks, allowing attackers to eavesdrop on or alter sensitive data transmitted between systems. It could lead to unauthorized access, data breaches, or impersonation of trusted entities, potentially compromising the integrity and confidentiality of communications.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA by exposing sensitive data during transmission. GDPR requires protection of personal data, while HIPAA mandates secure handling of health information. A breach could result in legal penalties and loss of trust.

Mitigation Strategies

Immediately update Industrial Edge App Publisher to version V1.27.9 or later. Restrict network access to the application and follow Siemens' operational security guidelines. Monitor for suspicious network activity or unauthorized code execution.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-78556. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart