ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

Siemens has fixed a high-severity vulnerability in its Software Center that was being exploited by ClickFix attackers. The flaw, which has a CVSS v4 score of 8.4, is a DLL sideloading vulnerability that allows an attacker to execute malicious code with the same privileges as the application. This is done by placing a specially crafted DLL in a directory that the application searches. The vulnerability has been assigned the identifier CVE-2026-110936. The exploitation of this flaw enables the deployment of a remote access trojan. The vulnerability's exploitation is part of the ClickFix attacks.