Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 41 MIN AGO
T-41M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-77645
Critical Remote Code Execution (RCE) vulnerability reported in Windchill
Critical
PUBLISHED
CNA: PTC
Base score
9.2
CVSS v4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:C/RE:M/U:Red
View raw JSON
CVE Program record
02
Description
CNA: PTC
Critical Remote Code Execution (RCE) vulnerability reported in Windchill
03
Metadata
SCHEMA: 5.2
Published
2026-08-20 22:08Z
1 DAY AGO
Last updated
2026-08-21 14:35Z
11 HR AGO
Reserved
2026-08-20
Assigning CNA
PTC
Record state
PUBLISHED
Severity
Critical (CVSS 9.2)
CVSS vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:C/RE:M/U:Red
Weaknesses
CWE-20
Improper Input Validation
Class
CWE-502
Deserialization of Untrusted Data
Base
SSVC decision
Exploitation
none
Automatable
no
Technical Impact
total
Data version
5.2
Document digest
0fe75cc03021bc81a036e3636fcc13ccef6b8e04d8e4db6904bafd3c41692abc
04
Affected products
PAIRS: 2
Vendor
Product
Versions
Platforms
PTC
Windchill PDMLink
11.0 M030, 11.1 M020, 11.2.1.0, 12.0.2.0, 12.1.2.0, 13.0.2.0, 13.1.0.0, 13.1.1.0, 13.1.2.0, 13.1.3.0
—
PTC
FlexPLM
11.0 M030, 11.1 M020, 11.2.1.0, 12.0.0.0, 12.0.2.0, 12.0.3.0, 12.1.2.0, 12.1.3.0, 13.0.2.0, 13.0.3.0
—
05
References
REFS: 1
www.ptc.com
https://www.ptc.com/en/support/article/CS474826
vendor-advisory
mitigation
permissions-required