CVE-2026-110936
published 2026-10-15CVE-2026-110936: A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an…
PriorityP279medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
KEVITW
CISA Known Exploited Vulnerabilitydue 2026-11-03
Exploited in the wild
EPSS
0.97%
61.5th percentile
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | siemens_software_center | < V4.0.9.8 | V4.0.9.8 |
| siemens | software_center | < 4.0.9.8 | 4.0.9.8 |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv4.08.4HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vulncheck6.7MEDIUM
cisa6.7MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Siemens Software Center uncontrolled search path (EUVD-2026-102072)
vuldb·2026-10-20·CVSS 6.7
CVE-2026-110936 [MEDIUM] Siemens Software Center uncontrolled search path (EUVD-2026-102072)
A vulnerability marked as critical has been reported in Siemens Software Center. This issue affects some unknown processing. This manipulation causes uncontrolled search path.
This vulnerability is registered as CVE-2026-110936. The attack needs to be launched locally. Furthermore, an exploit is available.
GHSA
A vulnerability has been identified in Siemens Software Center (All versions).
ghsa_unreviewed·2026-10-15
CVE-2026-110936 [HIGH] CWE-427 A vulnerability has been identified in Siemens Software Center (All versions).
A vulnerability has been identified in Siemens Software Center (All versions). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
VulnCheck
Siemens software_center Uncontrolled Search Path Element
vulncheck·2026·CVSS 6.7
CVE-2026-110936 [MEDIUM] Siemens software_center Uncontrolled Search Path Element
Siemens software_center Uncontrolled Search Path Element
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
Affected: Siemens software_center
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://productcert.siemens.com/news/2026/10/19/active-exploitation-of-cve-2026-110936-in-siemens-software-center/
CISA
Siemens Software Center Uncontrolled Search Path Element Vulnerability
cisa·2026-10-20·CVSS 6.7
CVE-2026-110936 [MEDIUM] CWE-427 Siemens Software Center Uncontrolled Search Path Element Vulnerability
Vulnerability: Siemens Software Center Uncontrolled Search Path Element Vulnerability
Affected: Siemens Software Center
Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakehol
No detection rules found.
No public exploits indexed.
Hackernews
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
blogs_hackernews·2026-10-21·CVSS 8.5
CVE-2026-96652 [HIGH] CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities ( KEV ) catalog, including four vulnerabilities impacting Plex Media Server that's collectively called Plex2Shell .
The vulnerabilities are listed below -
CVE-2026-96652 (CVSS score: 5.3) - Plex Media Server Server-Side Request Forgery (SSRF) vulnerability
CVE-2026-96654 (CVSS score: 6.9) - Plex Media Server improper neutralization of encoded URI schemes in a web page Vulnerability
CVE-2026-9665
Hackernews
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
blogs_hackernews·2026-10-20·CVSS 6.7
CVE-2026-110936 [MEDIUM] ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks.
The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL in a directory the application searches, resulting in execution of malicious code with the same privileges as the affected service.
"The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path," Siemens said in an advisory. "This
2026-10-15
Published
2026-10-20
Added to CISA KEV
Exploited in the wild