AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

PTCCVE-2026-77645

PTC Windchill: remote code execution

PTC

CVE-2026-77645 · Published Aug 20, 2026 · updated Sep 9, 2026

Critical9.2
No fix yet
PTC advisory

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

Affected versions

PackageAffectedFixed in
FlexPLM
Product
<= 11.0 M030No fix yet
<= 11.1 M020No fix yet
<= 11.2.1.0No fix yet
<= 12.0.0.0No fix yet
Windchill PDMLink
Product
<= 11.0 M030No fix yet
<= 11.1 M020No fix yet
<= 11.2.1.0No fix yet
<= 12.0.2.0No fix yet
Details and references
CVSS 4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Red
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-20, CWE-502

More PTC advisories

All PTC
Critical 9.3Aug 20PTC Windchill Risk and: improper access controlCVE-2026-77644no fix yetHigh 7.7Aug 20PTC Windchill PDMLink: server-side request forgeryCVE-2026-77646no fix yet