THREATOPS

THREAT OPS › CVEs › CVE-2026-12569

CVE-2026-12569 — PTC Windchill and FlexPLM Improper Input Validation Vulnerability

CISA KEVExploited: confirmedPTC

PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code by sending a malicious request to the network.

Vulnerability details

Affected productsWindchill and FlexPLM
KEV remediation due2026-06-28

Related reporting

[CISA KEV] CVE-2026-12569 — PTC Windchill and FlexPLM: PTC Windchill and FlexPLM Improper Input Validation Vulnerabilitycisa_kev
June 2026 CVE Landscaperecordedfuture