CVE-2026-110936

Vendor

Siemens

Product

Software Center

CVSS

6.7

EPSS

0.010 (p62)

CISA KEV

added 20 Oct 2026, due 3 Nov 2026 (2d)

Weakness

CWE-427

Exposure class

OT / ICS, Collaboration

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 65
   KEV NVD 16d ago

   Siemens Software Center Uncontrolled Search Path Element Vulnerability

   Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to…

   KEV · due 3 Nov 2026 CVSS 6.7 Fix available CVE-2026-110936 Siemens
2. 52
   CISA alert CISA 11d ago

   CISA Adds Six Known Exploited Vulnerabilities to Catalog

   CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-96652 Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability…

   Exploited CVE-2026-96652CVE-2026-96654CVE-2026-96655+3 more
3. 32
   ICS advisory CISA 9d ago

   Siemens Software Center

   The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches…

   CVSS 3.1 Fix available CVE-2026-110936 Siemens
4. 27
   CCCS advisory CCCS 11d ago

   Siemens security advisory (AV26-1063)

   CVE-2026-110936 Siemens