What’s Vulnerable › Products

PTC FlexPLM vulnerabilities

4 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your PTC FlexPLM version is affected

Exploited PTC FlexPLM vulnerabilities

• CVE-2026-12569 — PTC Windchill and FlexPLM Improper Input Validation Vulnerability

Latest PTC FlexPLM vulnerabilities

• CVE-2026-77646 — Server Side Request Forgery (SSRF) vulnerability reported in Windchill (CVSS 7.7)
• CVE-2026-77645 — Critical Remote Code Execution (RCE) vulnerability reported in Windchill (CVSS 9.2)
• CVE-2026-12569 — PTC Windchill and FlexPLM Improper Input Validation Vulnerability (CVSS 9.8) — exploited
• CVE-2026-4681 — Critical Remote Code Execution vulnerability reported in Windchill (CVSS 9.3)