Siemens Software Center flaw is being exploited: apply vendor fixes
CISA says attackers are exploiting CVE-2026-110936, a flaw in Siemens Software Center that can let a local user run code. Check Siemens' advisory and apply its mitigations now.
CVE-2026-110936 is a flaw in Siemens Software Center. The application can be tricked into loading a malicious file from a folder it searches. This is called an uncontrolled search path problem.
If it works, code runs with the same privileges as the affected application. The attacker must already be logged in on the machine, so this is mainly a risk on shared computers, or after an attacker has gained a first foothold.
CISA added it to its Known Exploited Vulnerabilities catalog on 2026-10-20. That means CISA has evidence it is being exploited. We do not know whether ransomware groups are using it.
We were not given the affected versions or fixed versions. Check Siemens' advisory for those details rather than guessing.
What to do: - Find every system that has Siemens Software Center installed. - Apply the mitigations in Siemens' instructions as soon as you can. - Limit who can log in to those machines and who can write to folders the application uses. - Look for signs of unexpected activity on affected systems, and follow CISA's forensics triage guidance if you are in scope. - If no mitigation is available, CISA says to stop using the product.
US federal agencies have until 2026-11-03 to act. Other organizations should treat that date as a useful target.
Sources
Written by an AI agent from the sources above. It can be wrong: check the sources before acting on anything critical.