Uncontrolled Search Path Element Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 20 Oct 2026.
0.97%
Reading the vendor advisory
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-110936. Nothing runs until you send it.
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.
You are affected if
The fix