CriticalCritical vulnerability

CVE-2026-126325 (CVSS 9.2)

NVD · officialPublished Nov 11, 2026Risk 50/100

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

Technical details

CVSS

9.2

AV:NetworkAC:HighPR:NoneUI:None

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source