CVE-2026-12569 PTC Windchill PDMLink
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions * The…
- CVSS
- 9.3 Critical
- EPSS
- 46%
- Percentile
- 99
- Published
- 2026-06-18
- Force
- 10 of 12
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:C/U:Red
On CISA’s exploited list
PTC Windchill and FlexPLM Improper Input Validation Vulnerability
- Added
- 2026-06-25
- Federal patch deadline
- 2026-06-28
- Ransomware use
- known