CVE-2026-78557
A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9)
- Risk score
- 68/100
- CVSS
- 8.3 v3.1
- Exploit chance (30 days)
- 0.5%
- Published
- 13 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A vulnerability in Industrial Edge App Publisher allows arbitrary JavaScript execution, enabling remote code execution (RCE) on the victim's machine. An attacker could exploit this to execute malicious code.
- Affected
- {'products': ['Industrial Edge App Publisher'], 'packages': [], 'versions': ['All versions < V1.27.9']}
- Fix
- Upgrade to version V1.27.9 or later
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 8.3 high
- Remotely exploitable without logging in
- Named in a government or vendor bulletin
Government and vendor bulletins
References
Original description
A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is integrated with Node.js, this vulnerability allows for the execution of arbitrary JavaScript, which can be leveraged to achieve remote code execution (RCE) on the victim's machine
Last activity 22 Oct 2026. Patch Forecast updates every hour.