CVE-2026-46819.3CriticalCWE-94
CVE-2026-4681: Critical Remote Code Execution vulnerability reported in Windchill
PTC · Windchill PDMLink
Vendor fix available · Affected: PTC Windchill PDMLink · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.09 (9 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
0.7%probability of exploitation in the next 30 days
54th percentile
050100
Higher than 54% of scored CVEs
9.3CriticalCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. This issue affects Windchill PDMLink: 11.0 M030, 11.1 M020, 11.2.1.0, 12.0.2.0, 12.1.2.0, 13.0.2.0, 13.1.0.0, 13.1.1.0, 13.1.2.0, 13.1.3.0; FlexPLM: 11.0 M030, 11.1 M020, 11.2.1.0, 12.0.0.0, 12.0.2.0, 12.0.3.0, 12.1.2.0, 12.1.3.0, 13.0.2.0, 13.0.3.0.
Coverage4 articles · 3 outlets
First in our coverage: CISA, 26 Mar.
Quiet for 20 weekslast report 26 Jun4 articles3 outlets
- Thu 26 Mar, 17:08 UTC. CISA, first report. PTC Windchill Product Lifecycle Management.
- Fri 27 Mar, 09:26 UTC. SecurityWeek, its first report on the story. CISA Flags Critical PTC Vulnerability That Had German Police Mobilized.
- Fri 27 Mar, 16:03 UTC. Security Affairs, its first report on the story. CISA and BSI warn orgs of critical PTC Windchill and FlexPLM flaw.
- Fri 26 Jun, 08:31 UTC. SecurityWeek. PTC Windchill Faces Attack, CISA Orders Patch for CVE-2026-12569.
- PTC Windchill Faces Attack, CISA Orders Patch for CVE-2026-12569SecurityWeek · mentions it in passing
- PTC Windchill Product Lifecycle ManagementCISA · official notice · first in our coverage
New articles also arrive in the RSS feed.