HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-78556 — A vulnerability has been identified in Industrial Edge App Publisher (All versio...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication (Man-in-the-Middle attack) and to spoof a trusted entity by interfering in the communication path between the client and the intended serv

Analysis

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication (Man-in-the-Middle attack) and to spoof a trusted entity by interfering in the communication path between the client and the intended server. CVSS Score: 7.4. Published: 2026-10-13T10:17:20.277.

Indicators of Compromise (1)

CVE (1)
CVE-2026-78556
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 13, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

Siemens Industrial Edge App Publisher

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-02.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to

CVE-2026-78556CVE-2026-78557
CISA Advisories
MEDIUMVulnerabilityNEW

US FCC Votes to Cut Off Device Testing in China by 2028

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/us-fcc-votes-to-cut-off-device-testing-in-china-by-2028-image_small-5-a-33251.jpg" align=right hspace=4><b>Carr Says Labs See Sensitive Product Details Months Before Devices Launch</b><br>The U.S. Federal Communications Commission voted Thursday to stop recognizing test labs in China and other countries that won’t accept American

Bank Info Security
MEDIUMVulnerabilityNEW

Leaked DHS employee archive, Icepick, faces challenges to stay online

A DHS contractor requested its removal, while a social media site blocked links to it. It was offline for a spell before finding a new home. The post Leaked DHS employee archive, Icepick, faces challenges to stay online appeared first on CyberScoop .

CyberScoop