Security · Updated 20 Oct, 12:41 pm IST
Siemens fixes DLL sideloading flaw used to deploy Remote Access Trojan

Why it matters for readers: It shows how attackers can abuse how programs load files to take over systems and why software updates are important.
- Siemens patched a DLL sideloading vulnerability in Siemens Software Center that attackers abused in ClickFix incidents.1
- The vulnerability is tracked as CVE-2026-110936 and has a CVSS v4 score of 8.4.1
- Exploitation allows an attacker to place a specially crafted DLL in a directory the application searches, leading to execution of malicious code with the application's privileges.1
- The flaw was used to deploy a Remote Access Trojan in the observed ClickFix attacks.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started