CVSS 9.2 (critical) · published 2026-11-11
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
Weakness: CWE-20, CWE-502
Source: NVD CVE-2026-126325
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.