Thehackernews PTC Issues Critical Patch for Windchill and FlexPLM RCE Vulnerability
Article Content
- •CVE-2026-126325 is a critical RCE vulnerability with a CVSS score of 9.2.
- •Affected systems include Windchill and FlexPLM versions 11.0 M030 to 13.1.4.0.
- •PTC-hosted environments are automatically patched; others must apply fixes urgently.
PTC has released patches for a critical vulnerability (CVE-2026-126325) in Windchill and FlexPLM software that could allow remote code execution. This flaw, with a CVSS score of 9.2, involves improper input validation and deserialization of untrusted data. Affected versions include Windchill 11.0 M030 to 13.1.4.0 and FlexPLM 11.0 M030 to 13.1.3.0. If hosted by PTC, systems have been patched automatically; otherwise, users must apply the patch urgently. This vulnerability follows another critical RCE issue (CVE-2026-12569) discovered in June 2026, which was by threat actors. Experts warn that PTC software is a prime target for ransomware and initial access brokers, posing significant risks to industrial operations. Organizations are advised to monitor for signs of exploitation and apply network restrictions if immediate patching isn't feasible.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Cl0p, PTC and CVE-2026-12569 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which versions are affected?
Is this vulnerability actively exploited?
What actions should I take?
Continue Reading
SAP Exploits Surge: Days to Zero Report Highlights Critical Vulnerabilities A report from Onapsis Research Labs and Recorded Future reveals that the median time from the release of a SAP Security Note to the first public exploit has drastically decreased to 1-3 days, down from 489 days in 2021. The report analyzed over 1.2 million events and noted a 123% increase in underground discussions… 
Vietnam Faces Surge in Cyberattacks Targeting Data and DDoS Attacks In Q3 2026, Vietnam experienced a significant increase in cyberattacks, with over 481 million data records leaked and a 258% rise in DDoS attacks. The Viettel Cybersecurity report revealed 65 data breaches, with sectors like retail and e-commerce particularly affected, losing over 165 million records. Attackers are…