Siemens says attackers are actively exploiting a DLL side-loading vulnerability in Siemens Software Center as part of ClickFix malware activity. The flaw, tracked as CVE-2026-110936, affects the software used to download, install and manage Siemens products. Siemens reports it issued an initial security advisory on 15 October 2026 and later updated it with guidance on remediation.
The outlets generally agree on the technical nature of the issue and that exploitation is occurring in the wild. Help Net Security and The Hacker News both cite a CVSS v4.0 score of 8.4 and describe the risk as enabling malicious code execution through a specially crafted DLL placed in a directory the application searches. Infosecurity Magazine and SecurityWeek also link the activity to the ClickFix campaign, while SecurityWeek adds that attackers use a genuine, signed copy of Siemens Software Center together with malicious DLLs and Windows lures.
Coverage differs mainly in emphasis: some articles lead with the Siemens advisory timeline and affected component, while others focus on the attack chain and delivery approach. Reported remediation guidance varies only in specificity, with Help Net Security including a specific fixed version number, while other summaries focus on applying an update.
