Vulnerability Details CVE-2026-110936
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 17.1%
CVSS Severity
CVSS v3 Score 6.7
Proposed Action
Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
Ransomware Campaign
Unknown
References
Products affected by CVE-2026-110936
-
cpe:2.3:a:siemens:software_center:-
-
cpe:2.3:a:siemens:software_center:3.0
-
cpe:2.3:a:siemens:software_center:3.5.8.2