PTC Windchill PDMLink FlexPLM Code Execution

The vulnerability of the PTC Windchill PDMLink and PTC FlexPLM lifecycle management systems is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

EUVD-2026-63755

A critical remote code execution RCE vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

EUVD-2026-63718

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability WRR Enterprise Edition...

EUVD-2026-63756

A Server-Side Request Forgery SSRF vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77645

A critical remote code execution RCE vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77646

A Server-Side Request Forgery SSRF vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77644

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability WRR Enterprise Edition...

CVE-2026-77646 Server Side Request Forgery (SSRF) vulnerability reported in Windchill

A Server-Side Request Forgery SSRF vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77646

A Server-Side Request Forgery (SSRF) vulnerability affects PTC Windchill PDMLink and PTC FlexPLM , exploitable through the deserialization of untrusted data . An unauthenticated remote attacker can trigger the flaw over the network with no user interaction, resulting in high confidentiality impac...

CVE-2026-77645

CVE-2026-77645 is a critical remote code execution (RCE) vulnerability in PTC Windchill and PTC FlexPLM , caused by deserialization of untrusted data . The CVSS 4.0 base score is 9.2 (CRITICAL) , with a network attack vector requiring no privileges and no user interaction . CISA's SSVC assessment...

CVE-2026-77645 Critical Remote Code Execution (RCE) vulnerability reported in Windchill

A critical remote code execution RCE vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77644

PTC Windchill Risk and Reliability (WRR) Enterprise Edition has a critical access-control bypass vulnerability (CVSS 9.3, network-exploitable, no authentication required), allowing unauthenticated remote attackers to compromise confidentiality, integrity, and availability. PTC published a support...

PT-2026-79265

Name of the Vulnerable Software and Affected Versions PTC Windchill affected versions not specified PTC FlexPLM affected versions not specified Description A critical remote code execution RCE issue exists in PTC Windchill and PTC FlexPLM. This flaw allows for the execution of arbitrary code...

PT-2026-79266

A Server-Side Request Forgery SSRF vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

PT-2026-79264

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability WRR Enterprise Edition...

CVE-2026-77644: Missing Authentication for Critical Function

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability WRR Enterprise Edition...

CVE-2026-77645: Improper Input Validation

A critical remote code execution RCE vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

CVE-2026-77646: Deserialization of Untrusted Data

A Server-Side Request Forgery SSRF vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

EUVD-2026-37831

A critical remote code execution RCE vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. This advisory also applies to all CPS versions The identified vulnerability also impacts Windchill and...

CVE-2026-12569

This CVE affects PTC Windchill PDMlink and PTC FlexPLM (and CPS) with a critical remote code execution via deserialization of untrusted data. Affected versions are Windchill PDMlink and FlexPLM prior to 11.0 M030 (per multiple sources), with remediation to 11.0 M030 or later. The issue is exploit...