HIGH 7.7 NVD

CVE-2026-78557

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data receive

A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine

References

https://cert-portal.siemens.com/productcert/html/ssa-968435.html

Published: 2026-10-13 · Source: NVD · Feed updated: 2026-10-13

This high severity vulnerability with a CVSS score of 7.7 was published on 2026-10-13 via NVD.

vulnfeed aggregates 12961 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.