CVE-2026-126325: PTC patches critical Windchill and FlexPLM vulnerability

# CVE-2026-126325: PTC patches critical Windchill and FlexPLM vulnerability

https://gcdradar.vercel.app/incidents/cve-2026-126325-ptc-patches-critical-windchill-and-flexplm-v · AIR-2026-1926 · live

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability): Critical CVSS 9.2, disclosed but no exploitation reported
- Fix status: Patched
- First reported: 2026-11-12
- AI role: No AI role
- Products: Windchill, FlexPLM
- CVE ids: CVE-2026-126325
- CVSS: 9.2

## Summary

PTC released patches for a critical deserialization flaw in its Windchill and FlexPLM products (CVE-2026-126325) that could allow remote code execution. The vulnerability has a CVSS v4 score of 9.2 and is considered critical.

## What to do

Apply the released patches for Windchill and FlexPLM immediately

## Latest updates

- 2026-11-12: PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution (https://thehackernews.com/2026/11/ptc-patches-critical-windchill-and.html)

## Sources

- 2026-11-12 The Hacker News: PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution https://thehackernews.com/2026/11/ptc-patches-critical-windchill-and.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.