TLS Connection Vulnerability in Industrial Edge App Publisher by Siemens

CVE-2026-78556

What is CVE-2026-78556?

A vulnerability exists in the Industrial Edge App Publisher, where the software fails to validate the server certificate during a TLS connection initiation. This defect allows potential attackers to perform Man-in-the-Middle attacks, enabling them to intercept and relay communication, as well as spoof trusted entities. By compromising the communication path between the client and the intended server, sensitive information can be exposed. Organizations using versions prior to V1.27.9 are particularly at risk and should apply necessary security measures to safeguard their systems.

References