A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
| Vendor | Product | Versions |
|---|---|---|
| siemens | software center | 0 |
Loading…
Updated CVSS from 6.7 to 8.4 (CVSS v4), severity from MEDIUM to HIGH, patch version to 4.0.9.8, added MITRE ATT&CK technique T1574.002 (DLL Side-Loading), and added tags reflecting ClickFix/Romulus campaign attribution and active exploitation.
Article confirms CVE-2026-110936 is being actively exploited in the wild, updating activelyExploited and exploitAvailable to true.
Initial creation
