VulnerabilityBSI CERT-Bund
PTC FlexPLM: Schwachstelle ermöglicht Codeausführung
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in PTC FlexPLM und PTC Windchill ausnutzen, um beliebigen Programmcode auszuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-45401 linked CVE
Open advisory with all CVEs
More on FlexPLM
Other advisories
- CriticalCVE-2026-126325PTC FlexPLM: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-126325A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deser…
- CriticalCVE-2026-77646PTC Windchill und FlexPLM: Mehrere Schwachstellen
- CriticalCVE-2026-77645PTC FlexPLM: Deserialisierung nicht vertrauenswürdiger Daten
- HighCVE-2026-77646A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the…
- CriticalCVE-2026-77645PTC FlexPLM: Deserialisierung nicht vertrauenswürdiger Daten
- CriticalCVE-2026-77645A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deser…
- CriticalCVE-2026-12569PTC FlexPLM: Schwachstelle ermöglicht Codeausführung
Other news entries
- PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code ExecutionNewsThe Hacker News
- PTC Windchill und FlexPLM: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering DataNewsThe Hacker News
- Clop created custom web shell for Windchill data theft attacksNewsBleepingComputer
- Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCENewsThe Hacker News
- Clop ransomware targets Windchill, FlexPLM in data theft attacksNewsBleepingComputer
- Patch Now: Critical PTC Windchill VulnerabilityVulnerabilitySANS NewsBites
- Hackers exploit critical PTC Windchill PLM software flawNewsCSO Online
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4540
ID