HIGHVulnerability
Verified
Global

CISA KEV: PTC Windchill and FlexPLM — PTC Windchill and FlexPLM Improper Input Validation Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code by sending a malicious request to the network.

Analysis

PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code by sending a malicious request to the network. Added to CISA Known Exploited Vulnerabilities catalog on 2026-06-25. Remediation due: 2026-06-28.

Indicators of Compromise (1)

CVE (1)
CVE-2026-12569
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jun 25, 2026. Verified by: CISA.

Related Threats

LOWVulnerabilityNEW

Supreme Court decision threatens EU-US data transfer agreement

In a Tuesday letter, Max Schrems, the founder of the Vienna-based privacy advocacy organization noyb, told European officials he plans to sue to invalidate the EU-U.S. Data Privacy Framework (DPF) that allows for the transfer of personal data from the EU to U.S. companies.

The Record
CRITICALVulnerability

NVD CRITICAL: CVE-2026-58455 — Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulne...

Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit() after an authentication redirect in loader.php combined with unsanitized input passed to shell_exec() in ajax/compose.php. Attackers can seed the required session flag through the incomplete auth check, then inject

CVE-2026-58455
NIST NVD
MEDIUMVulnerability

Scattered Spider Suspect Extradited From Finland to US

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/scattered-spider-suspect-extradited-from-finland-to-us-image_small-10-a-32140.jpg" align=right hspace=4><b>FBI Says Peter Stokes, 19, 'Exhibited Substantial Wealth for a Person of His Age'</b><br>A suspected member of the notorious Scattered Spider cybercrime group has been extradited from Finland to stand trial in the United Stat

Bank Info Security