Siemens confirms CVE-2026-110936 is exploited through a signed binary shipped with a malicious DLL

On October 19, 2026, Siemens confirmed active exploitation of CVE-2026-110936, a DLL side-loading flaw in Siemens Software Center: attackers distribute a genuine, signed copy of the program alongside a malicious DLL, outside official channels. Update to version 4.0.9.8 and hunt the published indicators, because a code signature is no longer proof of trust.