A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
Is CVE-2026-110936 exploited?
Listed in the CISA KEV catalog on 2026-10-20.
Federal remediation due 2026-11-03.
EPSS puts exploitation in the next 30 days at <1%.
Public exploit code: none found in monitored sources.
Which products and versions are affected?
Siemens · Siemens Software Center · >= 0, < V4.0.9.8
Is there a patch?
Patch information is not available in this record.