Siemens Software Center < 4.0.9.8 DLL Sideloading (SSA-580366)

The version of Siemens Software Center installed on the remote Windows host is prior to 4.0.9.8. It is, therefore, affected by a vulnerability as referenced in the SSA-580366 advisory. - A vulnerability has been identified in Siemens Software Center All versions V4.0.9.8. The affected application...

Siemens Software Center Uncontrolled Search Path Code Execution

The vulnerability of the software for loading, installing, and activating Siemens Software Center is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with elevated privileges using a specially created DLL file...

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-96652 Plex Media Server Server-Side Request Forgery SSRF Vulnerability CVE-2026-96654 Plex Media Server Improper Neutralization of Encoded URI Schemes in a...

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks. The high-severity vulnerability, tracked as CVE-2026-110936 CVSS v4 score: 8.4, could allow an attacker to place a specially-crafted DLL in a directory the...

Siemens Software Center Uncontrolled Search Path Element Vulnerability

Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application...

VulnCheck KEV: CVE-2026-110936

Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application...

CVE-2026-110936

A vulnerability has been identified in Siemens Software Center All versions V4.0.9.8. The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application...

CVE-2026-110936

A vulnerability has been identified in Siemens Software Center All versions V4.0.9.8. The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application...

CVE-2026-110936

A vulnerability has been identified in Siemens Software Center All versions V4.0.9.8. The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application...

EUVD-2026-102072

A vulnerability has been identified in Siemens Software Center All versions. The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches,...

CVE-2026-110936

A vulnerability exists in Siemens Software Center (all versions

CVE-2026-110936: Uncontrolled Search Path Element

A vulnerability has been identified in Siemens Software Center All versions V4.0.9.8. The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application...

Siemens Software Center

SUMMARY The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the...

PT-2026-114947

Name of the Vulnerable Software and Affected Versions Siemens Software Center versions prior to 4.0.9.8 Description Siemens Software Center loads dynamic-link libraries DLLs from an uncontrolled search path, a behavior known as DLL side-loading. This allows an authenticated local attacker to plac...

PT-2026-121190

Уязвимость программного средства загрузки, установки и активации программного обеспечения Siemens Software Center связана с неконтролируемым элементом пути поиска. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код с повышенными привилегиями с помощью специально...

Siemens Software Center: Permissions, licensing, and access control issues

The Siemens Software Center has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from the loading of dynamic link libraries DLLs from uncontrolled search paths. This could allow authenticated local attackers to place malicious DLLs in the application’...

CVE-2026-25265 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center

Privilege escalation due to weak configuration while temporary file handling...

CVE-2026-25265 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center

Privilege escalation due to weak configuration while temporary file handling...

CVE-2026-25265

CVE-2026-25265 affects Qualcomm Software Center , where a privilege escalation is possible due to the creation of a temporary file with insecure permissions . The root cause is a weak configuration during temporary file handling, allowing a local attacker with low privileges to gain full control ...

CVE-2026-25264

Qualcomm Software Center is affected by an uncontrolled search path element vulnerability arising from weak configuration during its package extraction process. A local user with low privileges can exploit this to escalate privileges, with changed scope and high impact on confidentiality, integri...