Siemens Software Center before 4.0.9.8 allows local DLL hijack
Siemens says the flaw has known active exploitation and that existing installs auto-update to 4.0.9.8 on next startup.
5
Stories per day · 30 days
2 RSS
Relatedsiemens4dll-hijacking2active-exploitation1actively-exploited1bod-26-041clickfix1dll-side-loading1dll-sideloading1ics1kev1romulus1
4 stories, newest first · one card per story
Stories tagged #software-center
Siemens Software Center DLL side-loading flaw exploited in ClickFix campaign
CVE-2026-110936 (CVSS 8.4) is fixed in Software Center 4.0.9.8; Siemens lists startup, file and IP indicators.
CISA lists Siemens Software Center DLL path flaw as exploited
Authenticated local attackers can plant a DLL for code execution; the federal action due date is November 3, 2026.
1
Siemens Software Center DLL sideloading flaw exploited in the wild
CVE-2026-110936 affects Siemens Software Center before V4.0.9.8, and Siemens reports active exploitation.