21 October 2026
Reference: CVE-2026-110936
1. What is being reported?
The Siemens Software Center application loads certain files in a way that can be tricked by someone with access to the computer. If an attacker places a specially designed file in the right location, the software might run it with full permissions, potentially allowing the attacker to control the system.
2. What this means in plain English
If your organisation uses Siemens Software Center, an attacker who already has some access to your computer could use this flaw to take full control of it. This could lead to data theft, disruption, or further attacks. Even if you don’t use this software directly, it’s important to check because it might be installed as part of other systems.
3. Could this affect a small business?
Small businesses or charities that use Siemens Software Center on their computers could be at risk, especially if the software version is older than 4.0.9.8. If you do not use this software, or it is not installed on your devices, this vulnerability likely does not affect you.
4. What to do now
- Check if Siemens Software Center is installed on your computers and note the version number.
- If installed, update the software to version 4.0.9.8 or later as soon as possible following Siemens’ instructions.
- If an update is not yet available, ask your IT provider about recommended mitigations or consider stopping use of the software temporarily.
- Ensure your IT provider reviews your systems for any signs of compromise related to this vulnerability.
5. Ask your IT provider
Can you confirm if Siemens Software Center is installed on our systems, and if so, have we applied the update to fix the known security vulnerability CVE-2026-110936?
6. Bottom line
If you use Siemens Software Center, update it promptly to protect your organisation from active attacks exploiting this flaw.
Information based on CISA KEV, NVD, and reputable security news reports.