PTC Windchill vulnerabilities

Latest PTC Windchill CVEs

Newest publication first

1. CVE-2026-126325 Critical Remote Code Execution (RCE) vulnerability reported in Windchill

   Published 2026-11-11

   Critical·CVSS 9.2 EPSS 0.51%

   A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.