logo

CISA and BSI warn orgs of critical PTC Windchill and FlexPLM flaw

ID: 59e6ec02-0a1b-50a8-acb6-7c4ffb97399e

STIX ID: report--59e6ec02-0a1b-50a8-acb6-7c4ffb97399e

Feed Name: Security Affairs

Threat Score
85/100

Date Published: 2026-03-27

Date Updated: 2026-04-22

Author: Pierluigi Paganini

...
...

CISA and German authorities warned of a critical, unpatched RCE in PTC Windchill and FlexPLM (CVE-2026-4681, CVSS 10.0) exploitable via deserialization; vendor advisories include mitigations and IoCs and authorities conducted mass notifications amid concerns of imminent exploitation though no active attacks have been confirmed.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.