CVE-2026-110936
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
- CVSS
- 8.4
- EPSS
- 0.001 (2.7th percentile)
- CISA KEV
- Not listed
- Exploitation
- none
- Public exploits
- None seen
- State
- PUBLISHED
Coverage
The Hacker NewsSpecialist. Specialist publisher: established trade press, or expert analysis with a track record
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL in a directory the…
Canadian Centre for Cyber SecurityAuthoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards
Siemens security advisory (AV26-1063)
Serial Number: AV26-1063 Date: October 19, 2026 As of October 15, 2026, Siemens is affected by a vulnerability in the following product: Siemens Software Center Prior to V4.0.9.8 Siemens has reported that CVE-2026-110936 is being exploited in the wild. The Cyber Centre encourages users and…
What we observed
No signals recorded