HIGHVulnerability
Verified
Global

CISA KEV: Siemens Software Center — Siemens Software Center Uncontrolled Search Path Element Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

Analysis

Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Added to CISA Known Exploited Vulnerabilities catalog on 2026-10-20. Remediation due: 2026-11-03.

Indicators of Compromise (1)

CVE (1)
CVE-2026-110936
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Oct 20, 2026. Verified by: CISA.

Related Threats

CRITICALVulnerability

Siemens Software Center

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-295-03.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to

CVE-2026-110936
CISA Advisories
LOWMalware

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL in a directory the application searches, resulting in execution of malicious code with the same privileges as the

CVE-2026-110936
The Hacker News
MEDIUMVulnerabilityNEW

US FCC Votes to Cut Off Device Testing in China by 2028

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/us-fcc-votes-to-cut-off-device-testing-in-china-by-2028-image_small-5-a-33251.jpg" align=right hspace=4><b>Carr Says Labs See Sensitive Product Details Months Before Devices Launch</b><br>The U.S. Federal Communications Commission voted Thursday to stop recognizing test labs in China and other countries that won’t accept American

Bank Info Security