// CVE · PUBLISHED 2026-08-20
CVE-2026-77645 PTC / Windchill PDMLink · PTC / FlexPLM
9.2 · CVSS 4.0 Critical
Description A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.
Details Products PTC / Windchill PDMLink · PTC / FlexPLM Published 20 Aug 2026 Modified 26 Oct 2026 CVSS 9.2 Critical (v4.0) Vector CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Red Score source CNA CWE CWE-20 , CWE-502 Record status Deferred