Skip to main content
Apexward Pulse
Type Vulnerability

Siemens

Siemens Software Center Uncontrolled Search Path Element Vulnerability

3 sourcesCVE-2026-110936

At a glance

High
Suggested 24-hour window, counted from the last update
ActiveConfirmed in-the-wild exploitation
Evidence-weighted, not popularity
Signal

Actively exploited in the wild — prioritise confirming exposure.

Why High

High rather than Critical: exposure is scored at a default because we cannot see your systems or suppliers. If you run or depend on Siemens Software Center, treat it as Critical.

Briefing

  • IT leaders should assess whether Siemens Software Center is in their estate and ensure they are running the latest version to mitigate this vulnerability.
  • Businesses should review the provided blog post for details on active exploitation and detection methods for CVE-2026-110936.

Questions to ask IT

  • Do we run Siemens Software Center, and which versions?
  • Is any of it reachable from the internet?
  • Have we checked whether it has already been used against us?
  • If it is still not patched, what mitigation is in place, and what is holding the fix up?

Next steps

  1. Confirm exposure and remediation status for affected products

Summary

  • Siemens Software Center has a vulnerability that could allow an authenticated local attacker to execute arbitrary code by placing a malicious DLL in a searched directory.
  • Siemens has released an updated version of Siemens Software Center and advises users to upgrade to the latest version.
  • The vulnerability is identified as CVE-2026-110936 and is listed in the US known-exploited catalogue.

Products and services involved

Same event, different frames

Distinct often headline the same incident differently.

Pulse

Last checked yesterday · Recheck overdue since 8 Nov 2026, 10:33 UK time

Story
3 Nov 2026, 12:04 UK time · 5d ago

Linked reporting from CISA ICS Advisories (official authority).

Review the new source against your estate and the next steps in the briefing.

Read source (CISA ICS Advisories)
EscalationDe-escalationCritical / liveWhat these mean
Drag to pan · Ctrl / ⌘ + scroll or pinch to zoom4 events

1 quiet check hidden.

Sources

How we know

Statements extracted from sources. Higher confidence means stronger corroboration.

  • ClaimedHeadline60% confidence

    Siemens Software Center Uncontrolled Search Path Element Vulnerability

  • ProbableSummary fact75% confidence

    This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Siemens has released a new version for Siemens Software Center and recommends to update to the latest version. Please refer to our blog post for additional information about current known active exploitation and how to detect it.

  • ConfirmedCVE identifier95% confidence

    Event involves CVE-2026-110936

  • ConfirmedKnown-exploited catalogue98% confidence

    CVE-2026-110936 is confirmed as exploited in the wild (US known-exploited catalogue)

  • ConfirmedEstimated attack likelihood95% confidence

    CVE-2026-110936 has an estimated ~1% chance of attack in 30 days (61.7th percentile) as of 2026-11-02 — probability signal, not confirmed exploitation