Siemens has remediated a high-severity DLL sideloading vulnerability in Siemens Software Center that was exploited by ClickFix threat actors to deploy a Remote Access Trojan. The flaw, tracked as CVE-2026-110936 with a CVSS v4 score of 8.4, allowed execution of malicious code with application privileges. Patches have been released; users are advised to update to the latest version.

What should defenders do?

Users should update Siemens Software Center to the latest version provided by Siemens. Apply available patches immediately to prevent exploitation. Monitor for indicators of compromise associated with ClickFix activity.

highVulnerability

ClickFix Attackers Exploit Siemens Software Center DLL Sideloading Flaw

CVE-2026-110936 (CVSS: 8.4) enables remote code execution via malicious DLL placement

Cyber.TechVoidPublished about 4 hours agoUpdated less than a minute ago1 min read

ClickFix Attackers Exploit Siemens Software Center DLL Sideloading Flaw

Key Takeaways

Siemens remediated CVE-2026-110936, a DLL sideloading vulnerability in Siemens Software Center.
The flaw was exploited by ClickFix threat actors to deploy a Remote Access Trojan.
CVSS v4 score of 8.4 indicates high severity.
Patches are available; users should update to the latest version immediately.

Quick answers

Related Security News

highMalware

OVHcloud CLI Releases Compromised on GitHub to Distribute Secret-Stealing Malware

On October 19, 2026, an attacker who gained access to a contributor's GitHub account replaced the download archives for five existing releases of the OVHcloud command-line tool. The malicious files were live for up to 94 minutes before being removed, and are designed to steal secrets stored on the disk of any machine that executes them. OVHcloud confirmed the account was hijacked and has since removed the compromised releases.

The Hacker Newsabout 2 hours ago1 min read