CVE-2026-12569

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 26, 2026

Last Seen

September 12, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Cl0p Ransomware Group Claims Data Theft from Nearly 50 Companies78.7

The Cl0p hacking group has claimed to have stolen significant data from nearly 50 companies, including Shell, Philips, General Electric (GE), and Fiserv. The group reported stealing approximately 89GB from Shell and 13.5GB from Philips, including sensitive engineering documents and project plans. Th...

Critical RCE Vulnerability in PTC Windchill and FlexPLM Under Active Exploitation78.0

Hackers are exploiting a critical vulnerability in PTC Windchill and FlexPLM, tracked as CVE-2026-12569, which allows remote code execution due to an unsafe deserialization flaw. This vulnerability affects product lifecycle management systems used across various industries, including defense and aer...

Clop Ransomware Exploits Critical Vulnerability in Windchill and FlexPLM72.8

The Clop ransomware gang is actively exploiting a critical vulnerability (CVE-2026-12569) in PTC Windchill and FlexPLM systems, allowing unauthenticated remote code execution. This exploitation involves deploying JSP webshells for data exfiltration, targeting sectors such as Manufacturing, Automotiv...

Cl0p Ransomware Exploits Critical Vulnerability in PLM Software, Compromising 40+ Firms69.9

The Cl0p ransomware group has exploited a critical vulnerability, CVE-2026-12569, in PTC Windchill, affecting over 40 industrial companies, including Shell, Philips, and key Apple suppliers. This attack involved mass exploitation tactics, allowing Cl0p to simultaneously compromise multiple organizat...