Vendors and CVEs › CVEs › CVE-2026-110936
CVE-2026-110936: what it is, who is affected and what to do
Siemens Software Center loads DLL files from an uncontrolled search path. An authenticated local attacker could plant a crafted file and run code with the application's privileges. Siemens released a fixed version. The report refers to known active exploitation.
- Known exploited. Yes, on CISA’s list of exploited flaws.
- CVSS. 8.4, as the source states.
- Records. CVE-2026-110936 on the National Vulnerability Database · CISA’s known exploited catalog
The stories
Critical Known exploited
Siemens Software Center flaw lets local attacker run code; exploitation reported
Siemens Software Center loads DLL files from an uncontrolled search path. An authenticated local attacker could plant a crafted file and run code with the application's privileges. Siemens released a fixed version.
Critical Known exploited
Siemens fixes Software Center flaw already used in attacks
Siemens fixed a DLL sideloading flaw (CVE-2026-110936, CVSS v4 8.4) in Siemens Software Center. An attacker could place a crafted DLL where the application searches and run malicious code.