by Kastro
Paper/Archive/CVE-2026-12569

CVE-2026-12569

PTC Windchill PDMLink — Remote Code Execution (RCE) vulnerability in Windchill PDMlink

KEV · due 28 Junransomware useEPSS 46%public exploitSSVC actCVSS 9.3
critical.is priorityof 100
98
CVSS 9.3 (CNA)9.3 / 10 × 3027.9In CISA KEV+3030.0EPSS percentile 98.8.988 × 2019.8Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.  * This advisory also applies to all CPS versions * The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030

Affected

ProductAffectedFixed inSource
Windchill PDMLink≤ 11.0 M030–CNA
Windchill PDMLink11.1 M020–CNA
Windchill PDMLink11.2.1.0–CNA
Windchill PDMLink12.0.2.0–CNA
Windchill PDMLink12.1.2.0–CNA
Windchill PDMLink13.0.2.0–CNA
Windchill PDMLink13.1.0.0–CNA
Windchill PDMLink13.1.1.0–CNA
Windchill PDMLink13.1.2.0–CNA
Windchill PDMLink13.1.3.0–CNA
FlexPLM≤ 11.0 M030–CNA
FlexPLM11.1 M020–CNA

Scores by source

PTC (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:C/U:Red
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

advisoryptc.com/en/support/article/CS473270refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-12569kevcisa.gov/known-exploited-vulnerabilities-catalog