No. CVE-2026-110936

A planted file can make Siemens Software Center run attacker code

Attack likelihood is EPSS, a daily estimate from FIRST.org of how likely this bug is to be used in attacks in the next 30 days.

The official description

Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

Read-only check, change nothing, send nothing anywhere.
Is Siemens Software Center (CVE-2026-110936) installed or running on this machine or in this project?
1. Find every copy and its version (apps, packages, containers, lockfiles).
2. Compare each version against the vendor's fixed version for CVE-2026-110936. Quote the vendor page you used.
3. Report a table: where, version, fixed version, status (exposed / fixed / not installed / unsure).
4. List the exact update steps, but do not run them.

Code on GitHub

Repos named after this bug. Some are scanners or write-ups, some are working attack code. Do not run them on a machine you care about.

• DAS-Bodhi/CVE-2026-110936-Siemens-Attack · 0 stars

Sources

• Vendor advisory (productcert.siemens.com)
• CISA Known Exploited Vulnerabilities catalog
• NVD record