ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

Image for article ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
News Source : Internet

News Summary

  • Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center.
  • The high-severity vulnerability, tracked as CVE-2026-110936, could allow an attacker to place a specially-crafted DLL in a directory the application searches.
  • The issue has been patched in version 4.0.9.8.
  • Huntress Labs researcher Jose Oregon has been credited with discovering and reporting the shortcoming."The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path," Siemens said in an advisory.
Siemens has addressed a DLL sideloading vulnerability impacting Siemens Software Center that it said has been exploited in ClickFix attacks.

Must read Articles