TL;DR On October 19, 2026, Siemens confirmed that attackers are exploiting CVE-2026-110936 in the wild. The Siemens Software Center vulnerability is a DLL sideloading flaw that a ClickFix campaign uses to run malware under a trusted, signed program. Version 4.0.9.8 fixes it. Why It Matters Siemens Software Center downloads, installs and updates Siemens software. Its files carry a valid Siemens signature, which makes them a useful disguise.