· zachyceno
EPSS 0.00 (nejvyšší)
Siemens Industrial Edge App Publisher
View CSAF Summary The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the management server and execute arbitrary code (RCE) on the local machine through Node.js integration. Siemens has released an update for the Industrial Edge App Publisher and recommends to update to the latest version. The…
Siemens výroba a průmysl doprava energetika zdravotnictví US
CVE v události 2
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-78556 | 7.6 4.0 · siemens 7.4 3.1 · siemens | – | 0.00 |
| CVE-2026-78557 | 8.3 3.1 · siemens 7.7 4.0 · siemens | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.