MSRXMSRXSecurity
Vendors / PTC

PTC vulnerabilities being exploited

1 PTC flaw was confirmed exploited in the wild in the past 365 days, 1 used in ransomware, across 1 product: Windchill and FlexPLM. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-06-25CVE-2026-12569 Windchill and FlexPLM
ransomwarePTC Windchill and FlexPLM Improper Input Validation Vulnerability

PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code by sending a malicious request to the network.

2026-06-28
Watch my PTC softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.