cve-2026-110936
HIGH CVSS 8.4 circl_kevAffected: Siemens / Siemens Software Center | Description: A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. | Patched since: 2026/10/15 | Exploitation type: unknown | CWEs: CWE-427 | Origin source: CNW | Notes: https://productcert.siemens.com/news/2026/10/19/active-exploitation-of-cve-2026-110936-in-siemens-software-center/
- Published
- Last Modified
CVSS details not available.
No product information available.
No references available.
No linked vulnerabilities found.
{
"cvss": 8.4,
"datePublished": "",
"dateUpdated": "",
"description": "Affected: Siemens / Siemens Software Center | Description: A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. | Patched since: 2026/10/15 | Exploitation type: unknown | CWEs: CWE-427 | Origin source: CNW | Notes: https://productcert.siemens.com/news/2026/10/19/active-exploitation-of-cve-2026-110936-in-siemens-software-center/",
"dueDate": "",
"exploited": true,
"id": "CVE-2026-110936",
"kev_catalogs": [
"circl"
],
"knownRansomwareCampaignUse": "",
"product": "Siemens Software Center",
"severity": "HIGH",
"source": "circl_kev",
"title": "CVE-2026-110936",
"vendor": "Siemens"
}