<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>pwn.watch: Siemens incident updates</title>
  <link>https://pwn.watch/t/siemens</link>
  <description>Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them.</description>
  <language>en</language>
  <lastBuildDate>Tue, 20 Oct 2026 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/t/siemens/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>[high] Siemens Software Center: Siemens Software Center Uncontrolled Search Path Element Vulnerability</title>
    <link>https://pwn.watch/i/siemens-software-center-cve-2026-110936</link>
    <guid isPermaLink="true">https://pwn.watch/i/siemens-software-center-cve-2026-110936</guid>
    <pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Added to CISA KEV on 2026-10-20.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Status:&lt;/strong&gt; live · &lt;strong&gt;Patch:&lt;/strong&gt; patched · &lt;strong&gt;Fixed in:&lt;/strong&gt; See vendor advisory linked in sources&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Latest updates:&lt;/strong&gt;&lt;/p&gt;&lt;ul&gt;&lt;li&gt;2026-10-20: CISA added CVE-2026-110936 to the KEV catalog (due 2026-11-03).&lt;/li&gt;&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;CVEs:&lt;/strong&gt; CVE-2026-110936&lt;/p&gt;</description>
  </item>
</channel>
</rss>
