Is CVE-2026-78557 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-78557

Update Industrial Edge App Publisher to version 1.27.9 or later. Minimize network exposure by ensuring control system devices are not accessible from the internet. Locate control system networks behind firewalls and isolate from business networks. Use VPNs for remote access, kept up to date. Follow Siemens operational guidelines for industrial security.

Quick answers

What is CVE-2026-78557?: Update Industrial Edge App Publisher to version 1.27.9 or later. Minimize network exposure by ensuring control system devices are not accessible from the internet. Locate control system networks behind firewalls and isolate from business networks. Use VPNs for remote access, kept up to date. Follow Siemens operational guidelines for industrial security.
How severe is CVE-2026-78557?: high, CVSS 8.3
Is CVE-2026-78557 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-78557 be mitigated?: Update Industrial Edge App Publisher to version 1.27.9 or later. Minimize network exposure by ensuring control system devices are not accessible from the internet. Locate control system networks behind firewalls and isolate from business networks. Use VPNs for remote access, kept up to date. Follow Siemens operational guidelines for industrial security.

CVSS

8.3

Vendor

—

Published

Oct 24, 2026 · 05:33

Patch

Unknown / not confirmed

Affected products

—

Mitigation

Siemens Industrial Edge App Publisher Vulnerabilities Enable Network-Based RCE

CISA and Siemens ProductCERT have disclosed two vulnerabilities in Siemens Industrial Edge App Publisher that can be chained to enable remote code execution. CVE-2026-78556 involves improper certificate validation allowing man-in-the-middle attacks, while CVE-2026-78557 involves cross-site scripting via unsanitized backend data, leveraging Node.js integration to achieve RCE. Affected versions are those prior to 1.27.9. Siemens has released an update patching both issues.

12m

CVE-2026-78557

Quick answers

Related News

Siemens Industrial Edge App Publisher Vulnerabilities Enable Network-Based RCE