Siemens Software Center

🗓️ 15 Oct 2026 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 1 Views

Authenticated local attacker can achieve arbitrary code execution in Siemens Software Center.

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	Siemens Software Center Uncontrolled Search Path Code Execution	21 Oct 202600:00	–	bdu_fstec
Circl	CVE-2026-110936	15 Oct 202614:29	–	circl
CISA KEV Catalog	Siemens Software Center Uncontrolled Search Path Element Vulnerability	20 Oct 202600:00	–	cisa_kev
CISA	CISA Adds Six Known Exploited Vulnerabilities to Catalog	20 Oct 202612:00	–	cisa
CVE	CVE-2026-110936	15 Oct 202614:01	–	cve
Cvelist	CVE-2026-110936	15 Oct 202614:01	–	cvelist
EUVD	EUVD-2026-102072	15 Oct 202614:01	–	euvd
NVD	CVE-2026-110936	15 Oct 202615:17	–	nvd
Positive Technologies	PT-2026-114947	15 Oct 202600:00	–	ptsecurity
Positive Technologies	PT-2026-121190	15 Oct 202600:00	–	ptsecurity

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-580366.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-580366.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-295-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-26-295-03
cisa	www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b

15 Oct 2026 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.16.7

CVSS 48.4

EPSS0.00238

SSVC

Siemens Software Center arbitrary code execution DLL loading uncontrolled search path local attack