# CVE-2026-110936

> **Siemens Software Center** vulnerability · **listed in CISA Known Exploited Vulnerabilities catalog** · severity: **MEDIUM** (CVSS 6.7).

## Description

A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

## Key facts

- **CVE ID:** CVE-2026-110936
- **Vendor:** Siemens
- **Product:** Software Center
- **Published:** 2026-10-15
- **CVSS severity:** MEDIUM
- **CVSS base score:** 6.7
- **CISA remediation due date:** 2026-11-03
- **CWE codes:** CWE-427

## Primary sources

- NIST NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-110936
- CISA KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

## Citation

> MORVS. CVE-2026-110936. Retrieved 2026-10-27 from https://api.morvs.ai/cve/CVE-2026-110936. Derived from NIST NVD + CISA KEV. Licensed CC0.

---

*[Dataset catalog](https://api.morvs.ai/datasets/) · [MORVS](https://morvs.ai/) · CC0 1.0*