Skip to main content

Windchill and FlexPLM vulnerabilities

1 published alerts for PTC Windchill and FlexPLM.

Actively exploited (KEV)Ransomware

CVE-2026-12569

PTC Windchill and FlexPLM Improper Input Validation Vulnerability

PTC Windchill and FlexPLM is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-12569). PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code by sending a malicious request to the network. CISA remediation due date: 2026-06-28. If you need help checking exposure, call (864) 335-9223.