Security1 hOctober 20, 2026, 01:15

Siemens Software Center flaw exploited in ClickFix attacks

Siemens said attackers exploited CVE-2026-110936 in Software Center to side-load malicious DLLs. The flaw, rated CVSS 8.4, is fixed in version 4.0.9.8, which installs automatically on launch. The attacks are linked to the Romulus ClickFix campaign.

SecurityWeek

Open source

CVE-2026-110936 carries a CVSS score of 8.4
Fix in version 4.0.9.8 installs automatically on launch
Attacks tied to the Romulus ClickFix campaign
Siemens denies any breach of its systems or update channels

#Siemens

Silent Lynx Exploits WinRAR Flaw in CIS Government Attacks

Security

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Security

Apple patches CoreGraphics flaw possibly exploited in targeted attacks

Security

Siemens Software Center flaw exploited in ClickFix attacks

Silent Lynx Exploits WinRAR Flaw in CIS Government Attacks

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Apple patches CoreGraphics flaw possibly exploited in targeted attacks

Hackers now exploit critical Roundcube flaw in code injection attacks