Siemens security advisory (AV26-1063)
Siemens security advisory (AV26-1063)
Serial Number: AV26-1063 Date: October 19, 2026 As of October 15, 2026, Siemens is affected by a vulnerability in the following product: Siemens Software Center Prior to V4.0.9.8 Siemens has reported that CVE-2026-110936 is being exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.…
Vulnerabilities mentionedAll →
- CVE-2026-1109368.4<1%DLL Search-Path Hijacking in Siemens Software Centerpublished · Siemens Software Center KEV
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-110936 | DLL Search-Path Hijacking in Siemens Software Center Siemens Software Center, in all versions, loads dynamic-link libraries from an uncontrolled search path (CWE-427). An authenticated local attacker who already has high privileges can place a crafted DLL in a directory the application searches, so the program loads that library. Successful exploitation runs arbitrary code with the privileges of Siemens Software Center and can fully compromise confidentiality, integrity, and availability on that system. The issue is local only: it requires high privileges, no user interaction, and does not extend impact to other systems under the published CVSS 4.0 score of 8.4. It is not listed in CISA KEV, and no public proof-of-concept is known. |
Full article80 words · extracted from cyber.gc.ca · click to collapse
Serial Number: AV26-1063
Date: October 19, 2026
As of October 15, 2026, Siemens is affected by a vulnerability in the following product:
- Siemens Software Center
- Prior to V4.0.9.8
Siemens has reported that CVE-2026-110936 is being exploited in the wild.
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
Text extracted automatically; images, tables and formatting may be missing. Original: https://cyber.gc.ca/en/alerts-advisories/siemens-security-advisory-av26-1063