The Hacker News on X: " PTC patches critical Windchill and FlexPLM flaw that could allow ...

X • November 12, 2026

🚨 PTC patches critical Windchill and FlexPLM flaw that could allow remote code execution.

CVE-2026-126325 scores 9.2. PTC-hosted systems are already patched; other deployments need the fix.

PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution

Per the CVE record, it's deserialization of untrusted data. Affected: Windchill 11.0 M030 to 13.1.4.0, FlexPLM 11.0 M030 to 13.1.3.0. Patch is in PTC article CS483249 (Nov 11), applied by a Windchill admin. Not in CISA KEV. PTC's second critical Windchill RCE since June.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PTC Issues Critical Patch for Windchill and FlexPLM RCE Vulnerability PTC has released patches for a critical vulnerability (CVE-2026-126325) in Windchill and FlexPLM software that could allow remote code execution. This flaw, with a CVSS score of 9.2, involves improper input validation and deserialization of untrusted data. Affected versions include Windchill 11.0 M030 to 13.1.4.0 and FlexPLM 11.0 M030 to 13.1.3.0. If hosted by PTC, systems have been patched automatically; otherwise, users must apply the patch urgently. This vulnerability follows another critical RCE issue (CVE-2026-12569) discovered in June 2026, which was by threat actors. Experts warn that PTC software is a prime target for ransomware and initial access brokers, posing significant risks to industrial operations. Organizations are advised to monitor for signs of exploitation and apply network restrictions if immediate patching isn't feasible. 2 sources 72

Extracted Entities

The Hacker News on X: " PTC patches critical Windchill and FlexPLM flaw that could allow ...

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (2)