The vulnerabilities of PTC Windchill PDMLink and PTC FlexPLM systems related to insufficient validation of input data allow attackers to execute arbitrary code.

The vulnerability of the PTC Windchill PDMLink and PTC FlexPLM lifecycle management systems is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

EUVD-2026-63756

A Server-Side Request Forgery SSRF vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

EUVD-2026-63718

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability WRR Enterprise Edition...

EUVD-2026-63755

A critical remote code execution RCE vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77645

A critical remote code execution RCE vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77644

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability WRR Enterprise Edition...

CVE-2026-77646

A Server-Side Request Forgery SSRF vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77646

A Server-Side Request Forgery (SSRF) vulnerability affects PTC Windchill PDMLink and PTC FlexPLM , exploitable through the deserialization of untrusted data . An unauthenticated remote attacker can trigger the flaw over the network with no user interaction, resulting in high confidentiality impac...

CVE-2026-77646 Server Side Request Forgery (SSRF) vulnerability reported in Windchill

A Server-Side Request Forgery SSRF vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77645

CVE-2026-77645 is a critical remote code execution (RCE) vulnerability in PTC Windchill and PTC FlexPLM , caused by deserialization of untrusted data . The CVSS 4.0 base score is 9.2 (CRITICAL) , with a network attack vector requiring no privileges and no user interaction . CISA's SSVC assessment...

CVE-2026-77645 Critical Remote Code Execution (RCE) vulnerability reported in Windchill

A critical remote code execution RCE vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77644

PTC Windchill Risk and Reliability (WRR) Enterprise Edition has a critical access-control bypass vulnerability (CVSS 9.3, network-exploitable, no authentication required), allowing unauthenticated remote attackers to compromise confidentiality, integrity, and availability. PTC published a support...

CVE-2026-77644 Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability WRR Enterprise Edition...

PT-2026-79266

A Server-Side Request Forgery SSRF vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

PT-2026-79264

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability WRR Enterprise Edition...

PT-2026-79265

Name of the Vulnerable Software and Affected Versions PTC Windchill affected versions not specified PTC FlexPLM affected versions not specified Description A critical remote code execution RCE issue exists in PTC Windchill and PTC FlexPLM. This flaw allows for the execution of arbitrary code...

CVE-2026-77646: Deserialization of Untrusted Data

A Server-Side Request Forgery SSRF vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77645: Improper Input Validation

A critical remote code execution RCE vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77644: Missing Authentication for Critical Function

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability WRR Enterprise Edition...

EUVD-2026-37972

Improper input validation in AVer PTC500S, PTC115, PTC500+, and PTC115+ cameras may allow a remote, unauthenticated attacker to achieve arbitrary code execution via a specially crafted web request...