CVE-2026-78557
Received Received - Intake

Cross-Site Scripting (XSS) in Industrial Edge App Publisher

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: siemens-SADP

Description
A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-78557
EUVD
EUVD-2026-98391

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Siemens Industrial Edge App Publisher 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in Industrial Edge App Publisher versions before V1.27.9. The application does not properly sanitize data from the backend before displaying it in the UI. Since it uses Node.js, this allows attackers to inject and execute arbitrary JavaScript code, potentially leading to remote code execution on the affected system.

Detection Guidance

Detection involves checking the installed version of Industrial Edge App Publisher. Compare the version against V1.27.9 or later. If the version is older, the system is vulnerable. No specific commands are provided in the resources.

Impact Analysis

An attacker could exploit this to run malicious code on your machine, potentially stealing data, installing malware, or taking control of your system. This could lead to unauthorized access, data breaches, or disruption of operations if you use the vulnerable software.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR (data protection) and HIPAA (health data privacy) requirements. Non-compliance may result in legal penalties, fines, or reputational damage for organizations handling sensitive data.

Mitigation Strategies

Immediately upgrade Industrial Edge App Publisher to version V1.27.9 or later to address the vulnerability. Disable the application if an update is not immediately possible and monitor for suspicious activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-78557. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart