Siemens Patches High-Severity DLL Sideloading Vulnerability Exploited in ClickFix Attacks

Siemens has addressed a DLL sideloading vulnerability in Siemens Software Center tracked as CVE-2026-110936 with a CVSS v4 score of 8.4. The high-severity flaw has been exploited in ClickFix attacks and allows an attacker to place a specially-crafted DLL in a directory searched by the application. Successful exploitation results in execution of malicious code with the same privileges as the application, enabling deployment of a Remote Access Trojan.