PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution
PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution
12 November 2026
PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in remote code execution.
The security flaw, tracked as CVE-2026-126325, carries a CVSS v4 score of 9.2 out of a maximum of 10.0.
It has been described as a case of improper input validation and deserialization of untrusted data that could result in