EUVD-2026-37831

🗓️ 18 Jun 2026 00:11:35Reported by EUVDType

Critical remote code execution in PTC Windchill PDMLink and FlexPLM via untrusted data deserialization; affects all platform versions before 11.0 M030.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-12569	18 Jun 202600:11	–	attackerkb
Circl	CVE-2026-12569	18 Jun 202601:30	–	circl
CISA KEV Catalog	PTC Windchill and FlexPLM Improper Input Validation Vulnerability	25 Jun 202600:00	–	cisa_kev
CVE	CVE-2026-12569	18 Jun 202600:11	–	cve
Cvelist	CVE-2026-12569 Remote Code Execution (RCE) vulnerability in Windchill PDMlink	18 Jun 202600:11	–	cvelist
NVD	CVE-2026-12569	18 Jun 202601:18	–	nvd
Positive Technologies	PT-2026-50580	18 Jun 202600:00	–	ptsecurity
The Hacker News	CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue	26 Jun 202612:31	–	thn
The Hacker News	⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More	29 Jun 202614:41	–	thn
VulnCheck KEV	VulnCheck KEV: CVE-2026-12569	25 Jun 202600:00	–	vulncheck_kev

[
  {
    "enisaIdVendor": [
      {
        "id": "c25951b1-706b-38a2-a603-49bb5d04d1ba",
        "vendor": {
          "name": "PTC"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "036e55db-5c4b-390c-9cf1-7e540a270d0c",
        "product": {
          "name": "Windchill PDMLink",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "11.2.1.0"
      },
      {
        "id": "0a335b0d-a88c-39b4-8880-b7c3559063be",
        "product": {
          "name": "Windchill PDMLink",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "13.1.3.0"
      },
      {
        "id": "0dc8c493-3f6a-380f-87d6-93491994faa3",
        "product": {
          "name": "FlexPLM",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "11.1 M020"
      },
      {
        "id": "24c4ad03-415b-30d3-a0cc-11f0fa9f8325",
        "product": {
          "name": "FlexPLM",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "13.0.2.0"
      },
      {
        "id": "304a1523-559a-383c-9ab3-c56ea480b0e7",
        "product": {
          "name": "FlexPLM",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "12.1.3.0"
      },
      {
        "id": "307d4311-6517-3305-b9dc-d450746bb2f0",
        "product": {
          "name": "Windchill PDMLink",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "12.1.2.0"
      },
      {
        "id": "48a07810-9519-3191-bae1-8a3cfa3f36bc",
        "product": {
          "name": "Windchill PDMLink",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "12.0.2.0"
      },
      {
        "id": "5f3db7f2-ed17-39b2-9c4a-1d870dac87b8",
        "product": {
          "name": "Windchill PDMLink",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "11.1 M020"
      },
      {
        "id": "69884deb-e70e-3f05-9492-e14e11ea7ad0",
        "product": {
          "name": "FlexPLM",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "12.1.2.0"
      },
      {
        "id": "6ee167ee-085e-36ca-a478-3b2082f391ab",
        "product": {
          "name": "FlexPLM",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "12.0.0.0"
      },
      {
        "id": "8b088b70-29e5-3649-a8b9-fb7df85ddd32",
        "product": {
          "name": "FlexPLM",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "11.2.1.0"
      },
      {
        "id": "956aedca-91d7-31a6-9305-1b45a547d9c4",
        "product": {
          "name": "Windchill PDMLink",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "13.1.1.0"
      },
      {
        "id": "a0fa6d2b-da4d-3cf5-b2d3-4397e98cdcf9",
        "product": {
          "name": "FlexPLM",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "13.0.3.0"
      },
      {
        "id": "a168046d-7dde-3ba0-a2bf-8e870de82322",
        "product": {
          "name": "FlexPLM",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "12.0.2.0"
      },
      {
        "id": "a1d7593d-4d17-37d2-91d7-2b951f559b73",
        "product": {
          "name": "Windchill PDMLink",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "13.0.2.0"
      },
      {
        "id": "bad8ca53-4ac6-3449-93c9-16468340db97",
        "product": {
          "name": "Windchill PDMLink",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "0 ≤11.0 M030"
      },
      {
        "id": "dd1fd1fc-685d-3f74-bbe8-6e80d474066e",
        "product": {
          "name": "Windchill PDMLink",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "13.1.0.0"
      },
      {
        "id": "e70088bf-e7af-379a-98da-0cd593f3ed80",
        "product": {
          "name": "FlexPLM",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "0 ≤11.0 M030"
      },
      {
        "id": "fd329527-4d62-328a-8f40-109c1bb45106",
        "product": {
          "name": "Windchill PDMLink",
          "vendor": {
            "name": "PTC"
          }
        },
        "product_version": "13.1.2.0"
      }
    ]
  }
]

Source	Link
ptc	www.ptc.com/en/support/article/CS473270

18 Jun 2026 13:05Current

6.3Medium risk

Vulners AI Score6.3

CVSS 49.3

EPSS0.01247

SSVC