Source: cisa.gov
A vulnerability identified as CVE-2026-110936 affects Siemens Software Center, involving an uncontrolled search path element. An authenticated local attacker could exploit this flaw by placing a specially crafted DLL in a directory searched by the application. Successful exploitation leads to arbitrary code execution with the privileges of the affected application. The vulnerability requires local access and authentication, limiting remote exploitation. It is tracked under CISA's BOD 26-04 directive for prioritizing security updates based on risk. Siemens has published an advisory (SSA-580366) with remediation guidance. The vulnerability is also catalogued in the NVD. Organizations using Siemens Software Center should apply patches promptly and follow forensic triage requirements outlined by CISA.
