Siemens Software Center DLL side-loading flaw CVE-2026-110936 exploited in Romulus ClickFix malware campaign
Siemens has confirmed that attackers are actively exploiting CVE-2026-110936 (CVSS v4 8.4), a DLL search-path/side-loading flaw (CWE-427) in Siemens Software Center, to deliver malware. Attackers bundle a genuine, validly signed copy of the application (version 3.5.8.7) with malicious DLLs that it loads from its own folder. The activity i…