# CVE-2026-110936: A planted file can make Siemens Software Center run attacker code

Status: Being used now (CISA KEV, added 2026-10-20)
Who: Windows users and companies who use Siemens Software Center.
Do this: Apply Siemens' update for Software Center.

## Agent prompt (read-only)
Read-only check, change nothing, send nothing anywhere.
Is Siemens Software Center (CVE-2026-110936) installed or running on this machine or in this project?
1. Find every copy and its version (apps, packages, containers, lockfiles).
2. Compare each version against the vendor's fixed version for CVE-2026-110936. Quote the vendor page you used.
3. Report a table: where, version, fixed version, status (exposed / fixed / not installed / unsure).
4. List the exact update steps, but do not run them.

## Official description
Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

## Sources
- https://productcert.siemens.com/productcert/html/ssa-580366.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-110936
- https://nvd.nist.gov/vuln/detail/CVE-2026-110936

Generated by isitexploited.org from public sources. Verify version numbers against the vendor before acting.