Siemens Software Center Vulnerability Exploited

Siemens revealed on Monday that threat actors exploited CVE-2026-110936 in its Software Center. The flaw, assigned a CVSS v4 score of 8.4, allows authenticated attackers to execute code with high privileges. Version 4.0.9.8 resolves the issue, while version 3.5.8.7 remains vulnerable. Siemens linked the attacks to the Romulus ClickFix campaign, noting no internal breach occurred.