Critical severity9.0NVD Advisory· Published Nov 11, 2026

CVE-2026-126325

Description

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

Affected products

Ptc/Flexplminferred2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)
Ptc/Windchillllm-fuzzy

Patches

Vulnerability mechanics

References

www.ptc.com/en/support/article/CS483249nvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000