Siemens ProductCERT and Siemens CERT
Siemens ProductCERT is a team of security experts managing security issues (receipt, investigation, coordination, reporting) for Siemens products, solutions and services. ProductCERT builds global relationships to enhance product security.
Featured News Article
Active Exploitation of CVE-2026-110936 in Siemens Software Center
October 19, 2026
Siemens has validated that there is an active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center. Siemens fixed the weakness in version 4.0.9.8 and published advisory SSA-580366 on 15 October. Existing installations update automatically the next time they start.
No Siemens system, product or update channel was breached to our knowledge. EDR vendors and authorities have been engaged for intelligence sharing, enabling broader detection coverage and coordinated defensive actions.
Siemens Security Advisories
Siemens ProductCERT investigates all reports of security issues and publishes Security Advisories for validated security vulnerabilities that directly involve Siemens products and require applying an update, performing an upgrade or other customer action. As part of the ongoing effort to help operators manage security risks and help keep systems protected, Siemens ProductCERT discloses the required information necessary for operators to assess the impact of a security vulnerability.
| ID | CVSS Score | Title | Version | Last Update | Downloads |
|---|
Subscribe to Security Advisories
To stay up to date with Siemens security advisories, you can register to our mailing list, subscribe to our RSS feed or ingest our CSAF feed. If you register to our mailing list, we will notify you via email on newly released or updated security advisories.
If you prefer CSAF or RSS to stay up-to-date, subscribe to one of our feeds:
- Siemens Security Advisories (CSAF)
- Siemens Security Advisories (RSS)
- Siemens Security Alerts and News (RSS)
To register to our mailing list, please send us an email to productcert@siemens.com with the subject line “[Advisory Mailing List] Subscribe".
In case you did not intend to subscribe or want to unsubscribe from the advisory mailing list, please send a mail to productcert@siemens.com with subject "[Advisory Mailing List] Unsubscribe" and as sender the email address to unsubscribe.
If delivery to your mail address permanently fails, we may unsubscribe you without further notice.
Get In Touch with Siemens ProductCERT or Siemens CERT
For Siemens portfolio/infrastructure security questions or to report potential issues, please contact us. We accept English or German emails; encrypted communication is preferred. Expect a response by the next business day in Germany (Munich).
Siemens ProductCERT - contact for products, solutions and services
PGP Public Key and Fingerprint: 580D 38DA 2285 55EB 2A39 9A81 18BA BD55 427E CF78
Email productcert@siemens.com
Siemens CERT - contact for infrastructure
PGP Public Key and Fingerprint: A3D1 8E40 D104 DEAD A112 3FF6 B485 0E2E 1AA2 2CD8
Email cert@siemens.com