Siemens Software Center CVE-2026-110936 exploited in real attacks

Siemens confirmed that CVE-2026-110936 in Software Center was used in real attacks. The DLL search-path flaw (CVSS 8.4) affects all versions before V4.0.9.8; CISA added it to its Known Exploited Vulnerabilities catalog on October 20 with a November 3 remediation deadline.

• DLL search-path flaw in Software Center scored 8.4 under CVSS v4.0
• All versions before V4.0.9.8 are affected; a fix is available
• CISA added the CVE to KEV on October 20, deadline November 3
• Attacks used ClickFix lures bundling the signed binary with malicious DLLs