# Siemens patches Software Center flaw exploited to deliver malware

_Published Tuesday, October 20, 2026 at 5:13 AM EDT · Security · Latest · Tier 2 — Notable_

![Siemens patches Software Center flaw exploited to deliver malware — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUJqb8f_ibR_O_dPoJqAVHZOVmgi23TsxhFzv19_3uzAbEqH6L6QMJUWdelmEKmDe6U9wj6KKyDpPKi_1a93IK1KJa-Ql0kFRtfqVe9sKQpVFj0dA65dCfRKCN7H0LQYgMdzqdJoLgSb6rRFBA4bfmf4oUqItqe6pVCsyxmEzCnHx02h_m1WsK6sJu7jy2/s1700-nu-rw-lo-l85-e365/siemens.jpg)

Siemens has patched a Software Center vulnerability that it says attackers exploited in ClickFix campaigns to execute malicious code. The flaw, CVE-2026-110936, lets a specially crafted library run with the affected application's privileges when loaded from an uncontrolled search path.

Attackers placed a malicious archive.dll beside a legitimately signed copy of Siemens Software Center. Huntress linked some campaigns to malicious ChatGPT Custom GPTs that directed victims to fake pages, where instructions tricked them into running PowerShell code that ultimately installed a remote access trojan.

The fix is available in version 4.0.9.8. Siemens advises organizations to update to that version or later and start the application to apply the update.

## Sources

- [The Hacker News](https://thehackernews.com/2026/10/clickfix-attackers-exploit-siemens.html)

---
Canonical: https://techandbusiness.org/newswire/J6nPgFLC35sJJ7vsebZjDc
Published: 2026-10-20T09:13:13.873Z
Story chronology: 2026-10-20T07:11:45.000Z
Retrieved: 2026-10-20T11:37:33.471Z
Publisher: Tech & Business (techandbusiness.org)