CVE-2026-110936
Received Received - Intake

Siemens Software Center DLL Search Path Vulnerability

Publication date: 2026-10-15

Last updated on: 2026-10-15

Assigner: siemens-SADP

Description
A vulnerability has been identified in Siemens Software Center (All versions). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-15
Last Modified
2026-10-15
Generated
2026-10-15
AI Q&A
2026-10-15
EPSS Evaluated
N/A
NVD
CVE-2026-110936
EUVD
EUVD-2026-102072

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Siemens Siemens Software Center 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-427 The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a DLL sideloading issue in Siemens Software Center (all versions). The application loads dynamic-link libraries from an uncontrolled search path, allowing an authenticated local attacker to place a malicious DLL in a directory it searches. This could lead to arbitrary code execution with the privileges of the affected application.

Impact Analysis

An attacker could exploit this to execute arbitrary code on your system with the same privileges as the Siemens Software Center application. This may allow them to install malware, steal data, or perform other malicious actions depending on the application's permissions.

Mitigation Strategies

Restrict local access to the system and ensure only trusted users can authenticate. Monitor directories where Siemens Software Center searches for DLLs for unauthorized files. Follow Siemens' operational guidelines for Industrial Security and protect network access as recommended.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-110936. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart