Attackers exploit Siemens Software Center DLL sideloading flaw in ClickFix attacks to deploy remote access trojan
Summary
Siemens has released a fix for a high-severity DLL sideloading vulnerability in Siemens Software Center, tracked as CVE-2026-110936 with a CVSS v4 score of 8.4, which it says has been exploited in ClickFix attacks. The flaw could let an attacker place a specially crafted DLL in a directory the application searches, causing malicious code to run with the same privileges as the application. The reporting describes attackers exploiting the flaw to deploy a remote access trojan.
Timeline
The Hacker News
Source ↗The Hacker News reports that Siemens fixed a high-severity DLL sideloading flaw in Siemens Software Center (CVE-2026-110936, CVSS v4 8.4) that has been exploited in ClickFix attacks to deploy a remote access trojan.

Comments
No comments yet.
to like and comment.