CVE-2026-110936

CVE Enrichment

CVSS: 8.4 HIGH
EPSS: 0.14%
EPSS Percentile: 2.66%
CISA KEV: Not listed

Description

A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: productcert@siemens.com
Published: 15-Oct-2026 22:17
Last Modified: 17-Oct-2026 16:16
EPSS Date: 2026-10-19
CWE: CWE-427

CVSS Vector


            CVSS:4.0                            AV:L /
                            AC:L /
                            AT:N /
                            PR:H /
                            UI:N /
                            VC:H /
                            VI:H /
                            VA:H /
                            SC:N /
                            SI:N /
                            SA:N /
                            E:X /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

References

productcert@siemens.com

Last enrichment sync: 20-Oct-2026 06:01
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (6)

as actively exploited. One of them is a DLL sideloading vulnerability in Siemens Software Center (CVE-2026-110936, CVSS score: 8.4) that has been abused in ClickFix attacks using a platform called Romulus. CISA Sets Patch Deadlines for Exploited Plex2Shell, Siemens and SiteGuard Flaws
Alongside Plex2Shell, CISA has added to its catalog of Known Exploited Vulnerabilities (KEV) an uncontrolled search path element flaw, tracked as CVE-2026-110936, in Siemens Software Center (SSC). CISA Warns of Active Exploitation of Plex2Shell and Other Flaws
Tracked as CVE-2026-110936 and rated 8.4 under CVSS v4.0, the flaw stems from an uncontrolled DLL search path and can lead to arbitrary code execution with the privileges of the affected application. Siemens Software Center DLL Side-Loading Flaw Exploited in ClickFix Attacks
CVE-2026-110936 Siemens Software Center Uncontrolled Search Path Element Vulnerability CISA Adds Six Actively Exploited Vulnerabilities to KEV Catalog
The high-severity vulnerability, tracked as CVE-2026-110936 (CVSS v4 score: 8.4), could allow an attacker to place a specially-crafted DLL in a directory the application searches, resulting in execution of malicious Siemens Patches Software Center DLL Sideloading Flaw Exploited in ClickFix Attacks

CVE (5)

Malware (2)

People (3)

MITRE ATT&CK (5)

Vendors (5)

Products (3)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.