Storyline

Critical remote code execution vulnerability found in PTC Windchill product lifecycle management

A critical remote code execution vulnerability (CVE-2026-4681) affecting PTC Windchill and FlexPLM products has been disclosed. The flaw, with a CVSS score of 10.0, allows exploitation via deserialization of untrusted data and impacts multiple versions of Windchill PDMLink and FlexPLM.

Evidence locked

Today's free sample is only available for the edition's flagship storyline.

Back Get the free brief by email Start free trial

No card needed for the free brief.

Evidence preview

ICS-CERT advisory on PTC Windchill vulnerability
cisa.gov
CISA Flags Critical PTC Vulnerability That Had German Police Mobilized
SecurityWeek
ALERT PTC Windchill Product Lifecycle Management: CVSS (Max): 10.0
AusCERT - Bulletins