Being exploited right now.

CVEs that CISA lists as exploited in real attacks, newest additions first.

Flaw: Code execution
Affects: Device

1 CVEs · updated 2026-11-11 23:01 UTC

CVE-2026-110936
A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

exploited Code execution Device Siemens Software Center

8.4 HIGH 1.0% exploit odds Fix listed 2026-10-15 15:17 UTC

These CVEs appear in CISA's Known Exploited Vulnerabilities (KEV) catalog, which means attackers are using them in real attacks. Each entry shows severity, exploit odds, fix status and a timeline.