Siemens News Articles

Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors

Attackers exploit CVE-2026-58115 in Siemens SIMATIC IoT2050 devices to deploy Linux bot payloads and command execution backdoors.

19 hours ago

Max-severity bug in widely used OT programming tool exploited to deliver Linux malware

Your industrial IoT gateway isn't exposed to the internet, right? RIGHT?!

1 day ago

Siemens Software Center - IT Security News

View CSAF Summary The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a...

2 weeks ago

Hackers Exploit Siemens Software Center Vulnerability to Execute Malicious Code - IT Security News

2026-10-22 11:10 Siemens has confirmed that the CVE-2026-110936 vulnerability, a DLL side-loading flaw in Siemens Software Center, is being actively exploited. Attackers are using this...

2 weeks ago

Hackers Actively Exploiting Siemens Software Center Flaw in ClickFix Malware Attacks - IT Security News

2026-10-22 11:10 Hackers are exploiting a DLL side-loading flaw in Siemens Software Center to run malware through a trusted, signed application. Tracked as CVE-2026-110936, the weakness...

2 weeks ago

CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server.

2 weeks ago

Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign - IT Security News

2026-10-20 14:10 Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center, the company’s tool for downloading, installing...

2 weeks ago

Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign - Help Net Security

Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center.

2 weeks ago

Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-L

Siemens identified the activity to be from the Romulus multi-platform ClickFix campaign, with Siemens Software Center users urged to apply an update

2 weeks ago

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan - SwapUpdate

Ravie LakshmananOct 20, 2026Vulnerability / Endpoint Security

2 weeks ago

ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan

Siemens patched a DLL sideloading flaw in Software Center exploited in ClickFix attacks to execute malicious code through a trusted application.

2 weeks ago

Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks

Siemens confirmed in-the-wild exploitation of CVE-2026-110936, a DLL side-loading flaw in Software Center, in ClickFix malware attacks.

2 weeks ago

Siemens Teamcenter vulnerability could allow account takeover (CVE-2025-23363) - Help Net Security

A vulnerability (CVE-2025-23363) in the Siemens Teamcenter PLM software could allow an attacker to steal users' valid session data.

Siemens UMC Vulnerability Allows Arbitrary Remote Code Execution

A critical vulnerability has been identified in Siemens' User Management Component (UMC), which could allow unauthenticated remote attackers to execute arbitrary code.

CVE-2024-37999 : SIEMENS MEDICALIS WORKFLOW ORCHESTRATOR IMPROPER OWNERSHIP MANAGEMENT - Cloud WAF

CVE-2024-37999 : A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions). The affected application executes as a trusted account with high privileges and network access.

Cerberus PRO EN Archives

VulnerabilityMarch 12, 2024CVE-2024-22039 (CVSS 10): Siemens Fire Protection Systems Vulnerable to Remote AttacksA serious security alert from Siemens ProductCERT reveals that multiple products within their...

CVE-2024-22039 (CVSS 10): Siemens Fire Protection Systems Vulnerable to Remote Attacks

CVE-2024-22039 could allow an unauthenticated remote attacker to execute code on the underlying operating system with root privileges.