ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
News Source : Internet
News Summary
- Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center.
- The high-severity vulnerability, tracked as CVE-2026-110936, could allow an attacker to place a specially-crafted DLL in a directory the application searches.
- The issue has been patched in version 4.0.9.8.
- Huntress Labs researcher Jose Oregon has been credited with discovering and reporting the shortcoming."The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path," Siemens said in an advisory.
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks.
Never miss a story from us, subscribe to our newsletter