CVEvulnerability

CVE-2026-4681

9.3 CRITICAL Published 2026-03-23 Modified 2026-06-17 Official page ↗
Status
Awaiting Analysis
Published
2026-03-23
Last modified
2026-06-17
Assigner
0b655efc-079c-4cb9-9e8d-164871239f4e
CVSS 4.0 (0b655efc-079c-4cb9-9e8d-164871239f4e)
9.3 CRITICAL — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Red
Weaknesses
CWE-94

Description

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. This issue affects Windchill PDMLink: 11.0 M030, 11.1 M020, 11.2.1.0, 12.0.2.0, 12.1.2.0, 13.0.2.0, 13.1.0.0, 13.1.1.0, 13.1.2.0, 13.1.3.0; FlexPLM: 11.0 M030, 11.1 M020, 11.2.1.0, 12.0.0.0, 12.0.2.0, 12.0.3.0, 12.1.2.0, 12.1.3.0, 13.0.2.0, 13.0.3.0.

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References