CVE-2026-110936
CVE-2026-110936
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
CVSS 8.4 · Élevée · EPSS 1,0% · Dans le catalogue KEV · Code d’exploitation public · Correctif disponible
- Publication
- Mise à jour
Produits et versions concernés
siemens software center
- Versions du logiciel
- ≥ 0, < V4.0.9.8: Concernée (custom)
Mettez à jour vers V4.0.9.8
Sources originales
- https://cert-portal.siemens.com/productcert/html/ssa-580366.html
- https://productcert.siemens.com/news/2026/10/19/active-exploitation-of-cve-2026-110936-in-siemens-software-center/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-110936
- https://nvd.nist.gov/vuln/detail/CVE-2026-110936