PTC Windchill und FlexPLM: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PTC Windchill und PTC FlexPLM ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen und vertrauliche Daten offenzulegen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-29633 linked CVEs
Open advisory with all CVEs
More on FlexPLM
Other advisories
- CriticalCVE-2026-126325PTC FlexPLM: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-126325A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deser…
- CriticalCVE-2026-77646PTC Windchill und FlexPLM: Mehrere Schwachstellen
- CriticalCVE-2026-77645PTC FlexPLM: Deserialisierung nicht vertrauenswürdiger Daten
- HighCVE-2026-77646A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the…
- CriticalCVE-2026-77645PTC FlexPLM: Deserialisierung nicht vertrauenswürdiger Daten
- CriticalCVE-2026-77645A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deser…
- CriticalCVE-2026-12569PTC FlexPLM: Schwachstelle ermöglicht Codeausführung
Other news entries
- PTC FlexPLM: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code ExecutionNewsThe Hacker News
- Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering DataNewsThe Hacker News
- Clop created custom web shell for Windchill data theft attacksNewsBleepingComputer
- Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCENewsThe Hacker News
- Clop ransomware targets Windchill, FlexPLM in data theft attacksNewsBleepingComputer
- Patch Now: Critical PTC Windchill VulnerabilityVulnerabilitySANS NewsBites
- Hackers exploit critical PTC Windchill PLM software flawNewsCSO Online
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2963
ID