PTC · Windchill and FlexPLM
Updated June 26, 2026
PTC Windchill and FlexPLM contain an improper input validation vulnerability, allowing unauthenticated remote attackers to execute arbitrary code. This vulnerability is critical as it can lead to a full system compromise. The vulnerability was recently added to the CISA KEV catalog, indicating its potential for exploitation.
If left unpatched, this vulnerability could allow attackers to gain full control of the system, leading to data breaches and other malicious activities. The potential consequences include significant financial loss and reputational damage.
Apply the latest security patches from PTC to Windchill and FlexPLM systems immediately. Ensure all related components are updated to prevent exploitation.