Siemens Software Center before 4.0.9.8 allows local DLL hijack
Siemens says the flaw has known active exploitation and that existing installs auto-update to 4.0.9.8 on next startup.
74
Product
Siemens Software Center
- Mentions · 7d0
- Mentions · 30d10
- All mentions10
- First seenOct 19, 2026
- Last mentioned8d ago
Timeline
10 articles · newest firstSiemens Software Center DLL side-loading flaw exploited before 4.0.9.8
Attackers shipped signed Software Center 3.5.8.7 with malicious DLLs; every build before 4.0.9.8 is affected.
76
Siemens Software Center DLL flaw exploited in ClickFix attacks
CVE-2026-110936, fixed in 4.0.9.8, was used to side-load malware beside an unmodified signed executable in the Romulus campaign.
76
CISA says attackers chain Plex flaws in Plex2Shell server breaches
Federal agencies must patch or mitigate by October 23; honeypots were hit with a cryptominer.
80
CISA Orders Patch for Exploited Plex2Shell, Siemens and SiteGuard Flaws
CISA added four Plex2Shell vulnerabilities and two other exploited flaws to its KEV catalog, ordering federal agencies to patch them by October 23 and November 3, 2026.
75
Attackers exploit Siemens Software Center flaw in ClickFix campaign
CVE-2026-110936 let version 3.5.8.7 load attacker files beside a signed binary; 4.0.9.8 fixes it.
74
CISA adds six exploited vulnerabilities to the KEV catalog
The entries cover four Plex Media Server bugs, SiteGuard command injection, and a Siemens path flaw.
76
ClickFix attacks exploit Siemens Software Center DLL flaw to deploy a RAT
CVE-2026-110936, CVSS v4 8.4, is fixed in Siemens Software Center 4.0.9.8; abused builds sideloaded archive.dll via a signed copy.
78
Siemens Software Center DLL sideloading flaw exploited in the wild
CVE-2026-110936 affects Siemens Software Center before V4.0.9.8, and Siemens reports active exploitation.
73
Siemens Software Center DLL flaw exploited in Romulus ClickFix attacks
CVE-2026-110936 let attackers side-load DLLs beside a signed Software Center build; version 4.0.9.8 fixes it.
76
Related CVEs
by mentions- CVE-2026-110936<1%8.4DLL Search-Path Hijacking in Siemens Software Center
- CVE-2026-966562%8.6Admin-Triggered Arbitrary File Write & RCE in Plex Media Server
- CVE-2026-1069313%8.5OS command injection in SiteGuard Server Edition
- CVE-2026-966542%6.9Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
- CVE-2026-966552%5.3Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
- CVE-2026-966522%5.3Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Appears with
- Siemensvendor · 10
- Romulusmalware · 4
- Forescoutorganization · 4
- CISAorganization · 3
- Plex Media Serverproduct · 3
- Plexvendor · 3
- EG Secure Solutionsvendor · 2
- Siemens ProductCERTorganization · 2
- LegionLoadermalware · 2
- SiteGuard Server Editionproduct · 2
- Huntress Labsorganization · 2
- CISAvendor · 1
- Federal Civilian Executive Branch agenciesorganization · 1
- Legion Loadermalware · 1
- EG Secure Solutions SiteGuard Server Editionproduct · 1
- Huntressorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.