Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-12569

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.  * This advisory also applies to all CPS versions * The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:1c7a6a448a1cda102c1759215b70761a3d150d398c66ae4931d7d8d146af824d
Known exploited
CISA KEV
Disputed
No
Stale source
No
Conflicts
2

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"FlexPLM","vendor":"PTC","versions":[{"lessThanOrEqual":"11.0 M030","status":"affected","version":"0","versionType":"semver"},{"status":"affected","version":"11.1 M020"},{"status":"affected","version":"11.2.1.0"},{"status":"affected","version":"12.0.0.0"},{"status":"affected","version":"12.0.2.0"},{"status":"affected","version":"12.1.2.0"},{"status":"affected","version":"12.1.3.0"},{"status":"affected","version":"13.0.2.0"},{"status":"affected","version":"13.0.3.0"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:900d94133a3b00a65e333d40d57677be5449696716e3311c0f484dd568b6dc10 · sha256:3ee4111489500699… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Windchill PDMLink","vendor":"PTC","versions":[{"lessThanOrEqual":"11.0 M030","status":"affected","version":"0","versionType":"semver"},{"status":"affected","version":"11.1 M020"},{"status":"affected","version":"11.2.1.0"},{"status":"affected","version":"12.0.2.0"},{"status":"affected","version":"12.1.2.0"},{"status":"affected","version":"13.0.2.0"},{"status":"affected","version":"13.1.0.0"},{"status":"affected","version":"13.1.1.0"},{"status":"affected","version":"13.1.2.0"},{"status":"affected","version":"13.1.3.0"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:900d94133a3b00a65e333d40d57677be5449696716e3311c0f484dd568b6dc10 · sha256:3ee4111489500699… · /containers/cna/affected/0
cwe · 2 assertions

{"cweId":"CWE-20","description":"CWE-20 Improper input validation","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:900d94133a3b00a65e333d40d57677be5449696716e3311c0f484dd568b6dc10 · sha256:3ee4111489500699… · /containers/cna/problemTypes/0/descriptions/0

{"cweId":"CWE-502","description":"CWE-502 Deserialization of untrusted data","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:900d94133a3b00a65e333d40d57677be5449696716e3311c0f484dd568b6dc10 · sha256:3ee4111489500699… · /containers/cna/problemTypes/1/descriptions/0

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"FlexPLM","vendor":"PTC","versions":[{"lessThanOrEqual":"11.0 M030","status":"affected","version":"0","versionType":"semver"},{"status":"affected","version":"11.1 M020"},{"status":"affected","version":"11.2.1.0"},{"status":"affected","version":"12.0.0.0"},{"status":"affected","version":"12.0.2.0"},{"status":"affected","version":"12.1.2.0"},{"status":"affected","version":"12.1.3.0"},{"status":"affected","version":"13.0.2.0"},{"status":"affected","version":"13.0.3.0"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:900d94133a3b00a65e333d40d57677be5449696716e3311c0f484dd568b6dc10 · sha256:3ee4111489500699… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Windchill PDMLink","vendor":"PTC","versions":[{"lessThanOrEqual":"11.0 M030","status":"affected","version":"0","versionType":"semver"},{"status":"affected","version":"11.1 M020"},{"status":"affected","version":"11.2.1.0"},{"status":"affected","version":"12.0.2.0"},{"status":"affected","version":"12.1.2.0"},{"status":"affected","version":"13.0.2.0"},{"status":"affected","version":"13.1.0.0"},{"status":"affected","version":"13.1.1.0"},{"status":"affected","version":"13.1.2.0"},{"status":"affected","version":"13.1.3.0"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:900d94133a3b00a65e333d40d57677be5449696716e3311c0f484dd568b6dc10 · sha256:3ee4111489500699… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"Automatable":"YES","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"RED","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"CONCENTRATED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:C/U:Red","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HI…
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:900d94133a3b00a65e333d40d57677be5449696716e3311c0f484dd568b6dc10 · sha256:3ee4111489500699… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

2 source assertions
{"cweId":"CWE-20","description":"CWE-20 Improper input validation","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:900d94133a3b00a65e333d40d57677be5449696716e3311c0f484dd568b6dc10 · sha256:3ee4111489500699… · /containers/cna/problemTypes/0/descriptions/0
{"cweId":"CWE-502","description":"CWE-502 Deserialization of untrusted data","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:900d94133a3b00a65e333d40d57677be5449696716e3311c0f484dd568b6dc10 · sha256:3ee4111489500699… · /containers/cna/problemTypes/1/descriptions/0

Known exploitation assertions

2 source assertions
{"cwes":["CWE-20","CWE-502"],"dateAdded":"2026-06-25","dueDate":"2026-06-28","knownRansomwareCampaignUse":"Known","notes":"https://www.ptc.com/en/support/article/CS473270 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-12569","product":"Windchill and FlexPLM","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring…
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:b632a47c8b4a05573a67f4bb1a8454ead89eece40431d75749b924d04e38c1a7 · sha256:635dff916c4092c0… · /vulnerabilities/31
    Open source location →
{"cwes":["CWE-20","CWE-502"],"dateAdded":"2026-06-25","dueDate":"2026-06-28","knownRansomwareCampaignUse":"Known","notes":"https://www.ptc.com/en/support/article/CS473270 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-12569","product":"Windchill and FlexPLM","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring…
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:2a4bde34d6db107f8c657d1b1ec7117a451c4d856b86daebffb7b8447dbdbabc · sha256:16acee8334e59e44… · /vulnerabilities/28
    Open source location →

Source references

2 source assertions
{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-12569"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:900d94133a3b00a65e333d40d57677be5449696716e3311c0f484dd568b6dc10 · sha256:3ee4111489500699… · /containers/adp/0/references/0
{"tags":["vendor-advisory","mitigation","permissions-required"],"url":"https://www.ptc.com/en/support/article/CS473270"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:900d94133a3b00a65e333d40d57677be5449696716e3311c0f484dd568b6dc10 · sha256:3ee4111489500699… · /containers/cna/references/0

Attribution and limitations

  • CISA Known Exploited Vulnerabilities JSON: CISA named for provenance; do not use CISA/DHS marks or imply endorsement Source →
  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer