CVE-2026-110936: Siemens Software Center
Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days.
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
Affected products
- Siemens Siemens Software Center: before V4.0.9.8 (fixed in V4.0.9.8)
Published 2026-10-15. Last modified 2026-10-17.