Vulnerability intelligence

CVE-2026-110936

Siemens Siemens Software Center CWE-427

A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

CVSS Score

8.4

High

EPSS — Exploit Probability

0.1%

Riskier than 3% of all CVEs · checked 2026-10-19

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories