← CVE Intelligence

CVE-2026-12569

Remote Code Execution (RCE) vulnerability in Windchill PDMlink PUBLISHED

Description (CNA)

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.  * This advisory also applies to all CPS versions * The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030

Affected (CNA)

Vendor / productVersions
PTC / Windchill PDMLinkaffected 0 through 11.0 M030; affected 11.1 M020; affected 11.2.1.0; affected 12.0.2.0; affected 12.1.2.0; affected 13.0.2.0; affected 13.1.0.0; affected 13.1.1.0; affected 13.1.2.0; affected 13.1.3.0
PTC / FlexPLMaffected 0 through 11.0 M030; affected 11.1 M020; affected 11.2.1.0; affected 12.0.0.0; affected 12.0.2.0; affected 12.1.2.0; affected 12.1.3.0; affected 13.0.2.0; affected 13.0.3.0

CWE

CWE-20, CWE-502

References

ADP enrichment

CISA-ADP

No English description supplied.