What happened
Siemens Software Center contains an uncontrolled search path element vulnerability (CWE-427) that could let an authenticated local attacker place a specially crafted DLL in a directory the application searches, leading to arbitrary code execution with the application's privileges. It was added to the CISA KEV catalog on 2026-10-20 with a federal due date of 2026-11-03.
Why it matters
KEV-confirmed (not AI-specific) but relevant to developer/enterprise workstations where AI tooling and Siemens software co-reside: a local DLL-hijack primitive on install/update tooling can run code as an elevated application. Patch per the vendor advisory and BOD 26-04.
Attack vector
Authenticated local attacker drops a crafted DLL into a directory searched by the application
Affected systems
Siemens Software Center (portions of the product affected by uncontrolled DLL search path)
Mitigation
Apply Siemens mitigations per SSA-580366 and CISA KEV/BOD 26-04 guidance