WATCHExploited vulnerability
Siemens Software Center
Siemens Software Center Uncontrolled Search Path Element Vulnerability
What's happening and what to do
A logged-in local user can plant a specially crafted DLL file where the program looks for libraries, tricking it into running attacker code with the app's privileges; this is being exploited in the wild. Siemens Software Center. Apply the vendor's mitigations now and check for signs of compromise, such as unexpected DLL files in the application's search directories.
AI summary of the sources on this page. Regenerated when a source changes.
Signals over time
- 2026-10-20Added to CISA's Known Exploited Vulnerabilities catalog.
- 2026-11-03Federal patch deadline for US agencies.
- 2026-11-03 21:55First seen here.
Source text
Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.