vulnti.work

Siemens Software Center: Siemens Software Center Uncontrolled Search Path Element Vulnerability

Info Listed in CISA KEV
CVECVE-2026-110936
First seen2026-10-21 01:15 UTC
Disclosed2026-10-20 00:00 UTC
Last updated2026-10-21 01:15 UTC
Channel statusauto

Summary

Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • Siemens:Software Center

Sources

  • CISA KEV DATABASE

Original Links

Timeline

  1. kev_ingest CISA KEV