中文

// CVE · PUBLISHED 2026-10-15

CVE-2026-110936

Siemens / Siemens Software Center

8.4 · CVSS 4.0HighCISA KEV

CISA lists this CVE as exploited in the wild. Patch it before anything rated by score alone.

Description

A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.