{"metadata": {"vulnerability": "CVE-2026-110936", "count": 33, "kinds": {"milestone": 5, "sighting": 7, "kev": 9, "other": 12}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-580366", "record": "SSA-580366", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-580366", "record": "SSA-580366", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-15T06:40:09.855Z", "date_only": false, "value": "2026-10-15T06:40:09.855Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110936", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T14:01:17.797Z", "date_only": false, "value": "2026-10-15T14:01:17.797Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110936", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T14:29:23.206Z", "date_only": false, "value": "2026-10-15T14:29:23.206826Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117445398546031767", "record": "CVE-2026-110936", "field": "creation_timestamp", "uuid": "056bb0ac-9220-46a6-850f-44d1f55cd725", "content": "CVE-2026-110936  A vulnerability has been identified in Siemens Software Center (All versions). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110936https://cert-portal.siemens.com/productcert/html/ssa-580366.html#siemens #Siemens #SiemensSoftwareCenter#CVE_2026_110936#bot", "url": "https://infosec.exchange/users/cve/statuses/117445398546031767"}, {"timestamp": "2026-10-15T14:44:52.539Z", "date_only": false, "value": "2026-10-15T14:44:52.539193Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110936", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T14:44:52.539Z", "date_only": false, "value": "2026-10-15T14:44:52.539193Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110936", "record": "FKIE_CVE-2026-110936", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T14:45:00.254Z", "date_only": false, "value": "2026-10-15T14:45:00.254Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110936", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:17:30Z", "date_only": false, "value": "2026-10-15T15:17:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-56H6-R36M-C9XV", "record": "GHSA-56H6-R36M-C9XV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T15:17:30.383Z", "date_only": false, "value": "2026-10-15T15:17:30.383", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110936", "record": "FKIE_CVE-2026-110936", "field": "published"}, {"timestamp": "2026-10-15T18:32:35Z", "date_only": false, "value": "2026-10-15T18:32:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-56H6-R36M-C9XV", "record": "GHSA-56H6-R36M-C9XV", "field": "published"}, {"timestamp": "2026-10-15T18:32:35Z", "date_only": false, "value": "2026-10-15T18:32:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-56H6-R36M-C9XV", "record": "GHSA-56H6-R36M-C9XV", "field": "modified"}, {"timestamp": "2026-10-17T00:00:00Z", "date_only": false, "value": "2026-10-17T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-580366", "record": "SSA-580366", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-17T08:34:46.314Z", "date_only": false, "value": "2026-10-17T08:34:46.314Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110936", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-17T08:34:46.314Z", "date_only": false, "value": "2026-10-17T08:34:46.314Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens", "record": "CVE-2026-110936", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-17T09:16:28.893Z", "date_only": false, "value": "2026-10-17T09:16:28.893", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110936", "record": "FKIE_CVE-2026-110936", "field": "lastModified"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-580366", "record": "SSA-580366", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "enisa-cnw-kev", "record": "CVE-2026-110936", "field": "timestamps.asserted_at", "uuid": "92e3ccd8-825f-4f1e-9d4f-1a6d945fb4da", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "enisa-cnw-kev", "record": "CVE-2026-110936", "field": "timestamps.first_seen_at", "uuid": "92e3ccd8-825f-4f1e-9d4f-1a6d945fb4da", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "enisa-cnw-kev", "record": "CVE-2026-110936", "field": "status.status_updated_at", "uuid": "92e3ccd8-825f-4f1e-9d4f-1a6d945fb4da", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-580366", "record": "SSA-580366", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-19T13:37:35Z", "date_only": false, "value": "2026-10-19T13:37:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/siemens-security-advisory-av26-1063", "record": "CVE-2026-110936", "field": "creation_timestamp", "uuid": "c578efc5-f25d-4efa-8560-d83b2847e0f7", "url": "https://cyber.gc.ca/en/alerts-advisories/siemens-security-advisory-av26-1063"}, {"timestamp": "2026-10-19T15:00:01Z", "date_only": false, "value": "2026-10-19T15:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "enisa-cnw-kev", "record": "CVE-2026-110936", "field": "timestamps.recorded_at", "uuid": "92e3ccd8-825f-4f1e-9d4f-1a6d945fb4da", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-19T15:00:01.731Z", "date_only": false, "value": "2026-10-19T15:00:01.731117Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/92e3ccd8-825f-4f1e-9d4f-1a6d945fb4da", "record": "CVE-2026-110936", "field": "creation_timestamp", "uuid": "c2f87208-8521-4842-b869-687c0bee592e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/92e3ccd8-825f-4f1e-9d4f-1a6d945fb4da"}, {"timestamp": "2026-10-19T17:44:00Z", "date_only": false, "value": "2026-10-19T17:44:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-110936", "field": "timestamps.asserted_at", "uuid": "ea655016-a343-4861-869e-bed9e4b45e4e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-19T17:44:00Z", "date_only": false, "value": "2026-10-19T17:44:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-110936", "field": "evidence.0.details.added_date", "uuid": "ea655016-a343-4861-869e-bed9e4b45e4e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-19T17:44:00Z", "date_only": false, "value": "2026-10-19T17:44:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-110936", "field": "timestamps.first_seen_at", "uuid": "ea655016-a343-4861-869e-bed9e4b45e4e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-19T17:44:00Z", "date_only": false, "value": "2026-10-19T17:44:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-110936", "field": "status.status_updated_at", "uuid": "ea655016-a343-4861-869e-bed9e4b45e4e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-19T18:24:17.276Z", "date_only": false, "value": "2026-10-19T18:24:17.276601Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117468959349978466", "record": "cve-2026-110936", "field": "creation_timestamp", "uuid": "b1e866f0-1b24-4c8e-951e-69a68d508045", "content": "Active Exploitation of CVE-2026-110936 in Siemens Software Center\n\nSiemens has validated that there is an active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center. \nhttps://productcert.siemens.com/news/2026/10/19/active-exploitation-of-cve-2026-110936-in-siemens-software-center/\n#eitw #cve #siemens", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117468959349978466"}, {"timestamp": "2026-10-19T20:52:43.781Z", "date_only": false, "value": "2026-10-19T20:52:43.781798Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117469545858753033", "record": "CVE-2026-110936", "field": "creation_timestamp", "uuid": "f9e6ba1c-1da8-47cf-8ecd-0d7412aa7aae", "content": "\"Threat actor? In my Siemens? It's more likely than you think\"\n\nSiemens has reported that CVE-2026-110936 is being exploited in the wild.\nhttps://www.cyber.gc.ca/en/alerts-advisories/siemens-security-advisory-av26-1063\n#CVE #Siemens #eitw", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117469545858753033"}, {"timestamp": "2026-10-20T09:04:03.107Z", "date_only": false, "value": "2026-10-20T09:04:03.107151Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117472430829067773", "record": "CVE-2026-110936", "field": "creation_timestamp", "uuid": "178de538-cb30-4c7e-9631-bca73a8e4c99", "content": "ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan\nSiemens has addressed a DLL sideloading vulnerability in Siemens Software Center, tracked as CVE-2026-110936 with a CVSS v4 score of 8.4, that it said has been exploited in ClickFix attacks. The flaw could allow an attacker to place a specially crafted DLL in a directory the application loads from, The Hacker News reports. https://thehackernews.com/2026/10/clickfix-attackers-exploit-siemens.html", "url": "https://infosec.exchange/users/edwardk/statuses/117472430829067773"}, {"timestamp": "2026-10-20T18:00:01Z", "date_only": false, "value": "2026-10-20T18:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-110936", "field": "timestamps.recorded_at", "uuid": "ea655016-a343-4861-869e-bed9e4b45e4e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T18:00:36.785Z", "date_only": false, "value": "2026-10-20T18:00:36.785206Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ea655016-a343-4861-869e-bed9e4b45e4e", "record": "CVE-2026-110936", "field": "creation_timestamp", "uuid": "970e9580-b29c-40ef-94bd-6a2733fe256d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ea655016-a343-4861-869e-bed9e4b45e4e"}]}