Siemens Software Center
Siemens Software Center
View CSAF Summary The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Siemens has released a new version for Siemens Software Center and…
Coverage timelineoldest first · each row is one article
- · 3d ago
- · 3d agoSiemens security advisory (AV26-1063)
Canadian Centre for Cyber Security· 75
- · 2d ago
- · 2d agoSiemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw
Infosecurity Magazine· 35
Vulnerabilities in this storyAll →
- CVE-2026-1109368.4<1%DLL Search-Path Hijacking in Siemens Software Centerpublished · Siemens Software Center KEV
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-110936 | DLL Search-Path Hijacking in Siemens Software Center Siemens Software Center, in all versions, loads dynamic-link libraries from an uncontrolled search path (CWE-427). An authenticated local attacker who already has high privileges can place a crafted DLL in a directory the application searches, so the program loads that library. Successful exploitation runs arbitrary code with the privileges of Siemens Software Center and can fully compromise confidentiality, integrity, and availability on that system. The issue is local only: it requires high privileges, no user interaction, and does not extend impact to other systems under the published CVSS 4.0 score of 8.4. It is not listed in CISA KEV, and no public proof-of-concept is known. |