Ptc Flexplm vulnerabilities
4 known vulnerabilities affecting ptc/flexplm.
Total CVEs
4
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL3HIGH1
Vulnerabilities
Page 1 of 1
CVE-2026-12569P1CRITICALCVSS 9.8KEVRansomware≤ 11.0m030v11.1m020+8 more2026-06-18
CVE-2026-12569 [CRITICAL] CWE-20 CVE-2026-12569: A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions
* The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030
cvelistv5nvd
CVE-2026-4681P2CRITICALCVSS 9.3v11.0 M030v11.1 M020+8 more2026-03-23
CVE-2026-4681 [CRITICAL] CWE-94 CVE-2026-4681: A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC Flex
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
This issue affects Windchill PDMLink: 11.0 M030, 11.1 M020, 11.2.1.0, 12.0.2.0, 12.1.2.0, 13.0.2.0, 13.1.0.0, 13.1.1.0, 13.1.2.0, 13.1.3.0; FlexPLM: 11.0 M030, 11.1
nvd
CVE-2026-77645P2CRITICALCVSS 9.2v11.0 M030v11.1 M020+8 more2026-08-20
CVE-2026-77645 [CRITICAL] CWE-20 CVE-2026-77645: A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC Flex
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
nvd
CVE-2026-77646P3HIGHCVSS 7.7v11.0 M030v11.1 M020+8 more2026-08-20
CVE-2026-77646 [HIGH] CWE-502 CVE-2026-77646: A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PT
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
nvd