VULNERABILITY INTELLIGENCE

CVE-2026-12569

CVSS score9.8 CRITICAL
EPSS probability46.05%
CISA KEVKnown exploited vulnerability
Published2026-06-18
Last modified2026-08-01
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

PTC Windchill and FlexPLM Improper Input Validation Vulnerability

Vendor / product: PTC / Windchill and FlexPLM

Description

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.  * This advisory also applies to all CPS versions * The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030

Weakness classification

  • 0b655efc-079c-4cb9-9e8d-164871239f4e: CWE-20

Primary references