Siemens Software Center DLL side-loading flaw CVE-2026-110936 exploited in Romulus ClickFix malware campaign
Siemens warned customers that attackers are actively exploiting CVE-2026-110936 (CVSS 8.4 under v4.0, 6.7 under v3.1; CWE-427 uncontrolled DLL search path), a DLL side-loading vulnerability in Siemens Software Center, to distribute malware. The activity is attributed to the Romulus multi-platform ClickFix campaign. Romulus is a server hos…