Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 41 MIN AGO
T-41M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-77646
Server Side Request Forgery (SSRF) vulnerability reported in Windchill
High
PUBLISHED
CNA: PTC
Base score
7.7
CVSS v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/AU:Y/R:U/V:D/RE:M/U:Red
View raw JSON
CVE Program record
02
Description
CNA: PTC
Server Side Request Forgery (SSRF) vulnerability reported in Windchill
03
Metadata
SCHEMA: 5.2
Published
2026-08-20 22:11Z
1 DAY AGO
Last updated
2026-08-21 20:08Z
5 HR AGO
Reserved
2026-08-20
Assigning CNA
PTC
Record state
PUBLISHED
Severity
High (CVSS 7.7)
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/AU:Y/R:U/V:D/RE:M/U:Red
Weaknesses
CWE-502
Deserialization of Untrusted Data
Base
CWE-918
Server-Side Request Forgery (SSRF)
Base
SSVC decision
Exploitation
none
Automatable
yes
Technical Impact
partial
Data version
5.2
Document digest
0b13908b9da21ed309f3acd6fc0f73ef6b355292a7274ab2d4356d90bb5ac92f
04
Affected products
PAIRS: 2
Vendor
Product
Versions
Platforms
PTC
Windchill PDMLink
11.0 M030, 11.1 M020, 11.2.1.0, 12.0.2.0, 12.1.2.0, 13.0.2.0, 13.1.0.0, 13.1.1.0, 13.1.2.0, 13.1.3.0
—
PTC
FlexPLM
11.0 M030, 11.1 M020, 11.2.1.0, 12.0.0.0, 12.0.2.0, 12.0.3.0, 12.1.2.0, 12.1.3.0, 13.0.2.0, 13.0.3.0
—
05
References
REFS: 1
www.ptc.com
https://www.ptc.com/en/support/article/CS474826
vendor-advisory
mitigation
permissions-required