Is CVE-2026-110936 exploited in the wild?

Yes. CVE-2026-110936 is known to be exploited in the wild, first recorded on 20 October 2026. Treat it as urgent.

How severe is CVE-2026-110936?

Critical severity, with a CVSS score of 6.7, published 15 October 2026.

Which products and versions are affected?

Siemens Software Center all versions before V4.0.9.8.

Is there a fix for CVE-2026-110936?

Yes: fixed in V4.0.9.8. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-110936 attacked?

It is attacked with local access, in a hosted service.

Am I affected by CVE-2026-110936?

Check whether you run Siemens Software Center at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-110936: Siemens Software Center DLL sideloading vulnerability

CVE-2026-110936 · Severity: critical · CVSS 6.7 · Exploited in the wild · Published 2026-10-15

Siemens Software Center is a tool that downloads, installs, and manages software licenses. It contains a DLL sideloading flaw that allows an authenticated local attacker to place a malicious library in a searched directory, resulting in arbitrary code execution with the application's privileges. An attacker with local access and elevated privileges can compromise the system and run malware.

Vendors: Siemens.

Quick answers

Is CVE-2026-110936 exploited in the wild?: Yes. CVE-2026-110936 is known to be exploited in the wild, first recorded on 20 October 2026. Treat it as urgent.
How severe is CVE-2026-110936?: Critical severity, with a CVSS score of 6.7, published 15 October 2026.
Which products and versions are affected?: Siemens Software Center all versions before V4.0.9.8.
Is there a fix for CVE-2026-110936?: Yes: fixed in V4.0.9.8. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-110936 attacked?: It is attacked with local access, in a hosted service.
Am I affected by CVE-2026-110936?: Check whether you run Siemens Software Center at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: V4.0.9.8

Technical details

The application loads dynamic-link libraries from an uncontrolled search path (CWE-427), allowing DLL sideloading attacks. An authenticated local attacker with high privileges can place a specially crafted DLL in a directory searched by the application to achieve arbitrary code execution with the privileges of the Software Center process. The vulnerability requires local access and authenticated status but no user interaction.

Affected products

Siemens Software Center all versions before V4.0.9.8

Timeline

2026-10-15: disclosed
2026-10-15: patched

References

https://cert-portal.siemens.com/productcert/html/ssa-580366.html

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.