// CVE · PUBLISHED 2026-11-11
CVE-2026-126325 PTC / Windchill · PTC / FlexPLM
9.2 · CVSS 4.0 Critical
Description A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.
Details Products PTC / Windchill · PTC / FlexPLM Published 11 Nov 2026 Modified 11 Nov 2026 CVSS 9.2 Critical (v4.0) Vector CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:Amber Score source CNA CWE CWE-20 , CWE-502 Record status Received