PTC Windchill PDMLink FlexPLM Code Execution

The vulnerability of the PTC Windchill PDMLink and PTC FlexPLM lifecycle management systems is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

CVE-2026-77646: Deserialization of Untrusted Data

A Server-Side Request Forgery SSRF vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

EUVD-2026-37831

A critical remote code execution RCE vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. This advisory also applies to all CPS versions The identified vulnerability also impacts Windchill and...

CVE-2026-12569: Improper Input Validation

A critical remote code execution RCE vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. This advisory also applies to all CPS versions The identified vulnerability also impacts Windchill and...