CVE-2026-4681criticalCWE-94

CVE-2026-4681: critical vulnerability in PTC FlexPLM

Critical Remote Code Execution vulnerability reported in Windchill

Published · Updated

Follow this CVE+ Monitor FlexPLM+ Monitor Windchill PDMLink

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.7%
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. This issue affects Windchill PDMLink: 11.0 M030, 11.1 M020, 11.2.1.0, 12.0.2.0, 12.1.2.0, 13.0.2.0, 13.1.0.0, 13.1.1.0, 13.1.2.0, 13.1.3.0; FlexPLM: 11.0 M030, 11.1 M020, 11.2.1.0, 12.0.0.0, 12.0.2.0, 12.0.3.0, 12.1.2.0, 12.1.3.0, 13.0.2.0, 13.0.3.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:C/RE:M/U:Red
Affected products
PTC · FlexPLMPTC · Windchill PDMLink
Related CVEs — PTC FlexPLM

In the same product, most dangerous first.

CVE-2026-12569CRITICALRemote Code Execution (RCE) vulnerability in Windchill PDMlinkEPSS 46.0%KEVCVE-2026-77645CRITICALCritical Remote Code Execution (RCE) vulnerability reported in WindchillEPSS 0.6%CVE-2026-77646HIGHServer Side Request Forgery (SSRF) vulnerability reported in WindchillEPSS 0.4%