CVE Catalog
CVE-2026-77645
CriticalCVSS 9.2Summary
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.
Risk Assessment
An attacker can remotely execute arbitrary code on the server, potentially leading to full system and data compromise.
Recommendation
Apply patches provided by PTC for Windchill and FlexPLM, and restrict access to the systems.
Original NVD description (English source)
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.