{"id":"CVE-2026-110936","title":"A vulnerability has been identified in Siemens Software Center (All versions)","summary":"A vulnerability has been identified in Siemens Software Center (All versions). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a spe…","severity":"medium","cvss":6.7,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-427"],"vendor":"Siemens","product":"Siemens Software Center","affected":["software_center < *"],"published":"2026-10-15","updated":"2026-10-15","sourceUpdated":"2026-10-15T15:17:30.383","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-110936","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-580366.html","label":"productcert@siemens.com"}],"tags":["nvd","cve.org","in-the-wild","exploit-available","kev"],"ssvc":{"exploitation":"active","automatable":"no","technicalImpact":"total","timestamp":"2026-10-20T19:46:48.354799Z"},"ingestedAt":"2026-10-15T15:09:08.432Z","epss":0.00967,"epssPercentile":0.61562,"exploited":true,"exploitAvailable":true,"kev":true,"kevDateAdded":"2026-10-20","kevDueDate":"2026-11-03","kevRansomware":false,"exploits":{"github":1,"githubRepos":["https://github.com/DAS-Bodhi/CVE-2026-110936-Siemens-Attack"],"checkedAt":"2026-10-27T16:56:45.013Z"},"slug":"CVE-2026-110936","body":"## Overview\n\nA vulnerability has been identified in Siemens Software Center (All versions). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":62,"depthScoreParts":{"impact":36.9,"likelihood":0.2,"exploitation":25,"ransomware":0},"changes":[{"seq":227636,"id":"CVE-2026-110936","ts":1792685036817,"field":"kev","old":"false","new":"true"},{"seq":226113,"id":"CVE-2026-110936","ts":1792527506948,"field":"exploit_available","old":"false","new":"true"},{"seq":226112,"id":"CVE-2026-110936","ts":1792527506948,"field":"exploited","old":"false","new":"true"}]}