CVE-2026-12569

CRITICAL

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.  * This advisory also applies to all CPS versions * The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030

CVSS v3.1 Score

9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 6/18/2026Modified: 6/30/2026

Related Intelligence (3)

CRITICALZero Day

Hackers exploit critical PTC Windchill PLM software flaw

Hackers are exploiting a critical vulnerability recently patched in PTC Windchill and FlexPLM, two product lifecycle management solutions used by organizations across a range of industries, including defense, aerospace, automotive, medical, electronics, industrial machinery, and consumer goods. The vulnerability, tracked as CVE-2026-12569 , is an unsafe deserialization flaw that enables remote cod

CVE-2026-12569
CSO Online
HIGHVulnerability

First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild

CISA has added the remote code execution flaw CVE-2026-12569 to its Known Exploited Vulnerabilities catalog. The post First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild appeared first on SecurityWeek .

CVE-2026-12569
SecurityWeek
HIGHVulnerability

CISA KEV: PTC Windchill and FlexPLM — PTC Windchill and FlexPLM Improper Input Validation Vulnerability

PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code by sending a malicious request to the network.

CVE-2026-12569PTC Windchill and FlexPLM
CISA KEV

References (2)

https://www.ptc.com/en/support/article/CS473270Permissions Requiredhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-12569US Government Resource