CVE-2026-110936 — Siemens / Siemens Software Center

Description (CNA)

A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

Affected (CNA)

Vendor / product	Versions
Siemens / Siemens Software Center	affected 0 before V4.0.9.8

CWE

CWE-427

References

https://cert-portal.siemens.com/productcert/html/ssa-580366.html

ADP enrichment

CISA-ADP

No English description supplied.

https://productcert.siemens.com/news/2026/10/19/active-exploitation-of-cve-2026-110936-in-siemens-software-center/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-110936