Loading…
S1SecOne4all
Join free
Back to News
CVE✓ EDITORIALLY REVIEWED

CVE-2026-110936: Siemens Software Center Uncontrolled Search Path Element Vulnerability

Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

CCISA Known Exploited VulnerabilitiesOriginal reporting source
1 min read

Source summary

Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

Read the original report

Source transparency

This editorial summary links back to the original reporting. Review the source for its complete context and updates.

Open original report ↗
Continue reading
More verified coverage
CVE · Oct 02, 2026 · 07:54 PM · UTC · UTC+00:00CVE-2026-59265: A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary (even remote) code when o

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary (even remote) code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until then, users can mitigate this issue by disabling Java runtime integration in the Preferences dialog. This prevents the attack. If this is not possible, or as an extra precaution, you can avoid opening

Read article →CVE · Oct 02, 2026 · 07:53 PM · UTC · UTC+00:00CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability

Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.

Read article →CVE · Sep 28, 2026 · 10:48 PM · UTC · UTC+00:00CVE-2026-101205: A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out-of-bounds read. The

A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out-of-bounds read. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Read article →