Skip to content
OpenAdvisories
Critical ICSA-26-085-03 1 CVE

PTC Windchill Product Lifecycle Management

Published Mar 26, 2026 · Updated Mar 26, 2026

Vendor: PTC Product: FlexPLM Product: Windchill PDMLink

Summary

Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution.

Vulnerabilities 1

  • Critical 9.3
    CVE-2026-4681

    Critical Remote Code Execution vulnerability reported in Windchill

    A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. This issue affects Windchill PDMLink: 11.0 M030, 11.1 M020, 11.2.1.0, 12…

    PTC FlexPLM Windchill PDMLink

Revision history

  1. #1

    Initial Republication of PTC's CS466318

References