Siemens Software Center flaw exploited in attacks, added to CISA KEV
CISA added , affecting Siemens Software Center, to its Known Exploited Vulnerabilities catalog, indicating use in real attacks. Siemens published advisory SSA-580366 with a fix. Apply the update as soon as possible.
What happened
CISA added CVE-2026-110936, affecting Siemens Software Center, to its Known Exploited Vulnerabilities catalog. This indicates the flaw has already been used in real attacks. Siemens published an advisory with a fix.
Why it matters
The flaw affects Siemens software used in corporate and industrial environments. With exploitation confirmed by CISA, unpatched installations are immediate targets and an intrusion can compromise the environments where the tool operates.
What to do
Apply the update from Siemens advisory SSA-580366 as soon as possible. Inventory where Siemens Software Center is installed and confirm the fix is applied on all systems.
For the technical team
- CVE
- CVE-2026-110936
- Affected
- Siemens Software Center · Siemens Software Center; specific versions not listed in the feed, see vendor advisory (SSA-580366).
- Exploitation
- Exploitation in attacks confirmed by CISA via inclusion in the KEV catalog. Sources do not mention a public PoC.
- Fix
- Fix available in the Siemens advisory (SSA-580366); fixed versions per the vendor advisory.
- Vector
- Flaw in Siemens Software Center; vulnerability type and exploitation condition not detailed in the sources.
- More details
- Advisory record start date 2026-10-20; incident opened 2026-10-26. References: Siemens ProductCert, NVD and CISA KEV.
Timeline
Incident opened.
