DE | EN
News November 12, 2026

Unpatched PTC FlexPLM flaw lets attackers run remote code

A high-severity vulnerability in PTC FlexPLM and Windchill allows an anonymous remote attacker to execute arbitrary program code. The issue remains unpatched.

Unpatched PTC FlexPLM flaw lets attackers run remote code

Key points

  • The vulnerability affects both PTC FlexPLM and PTC Windchill.
  • An anonymous attacker could exploit the flaw remotely to run arbitrary code.
  • The advisory classifies the vulnerability as high severity and unpatched.

Context

The warning comes from the German CERT-Bund’s security advisory portal. Organizations operating these PTC products should determine whether their deployments are affected and track the availability of a fix.

What this means for you

Directly applicable

You can use the warning to identify affected FlexPLM and Windchill installations, check their exposure, and plan the next steps for securing these systems.

Who benefits: Developers and technical decision makers can prioritize affected PTC deployments and the surrounding legacy integrations in their security reviews.

Share article:

Does a report affect your system?

Send the link to the report and two sentences about your system. You get an assessment of whether action is needed and what the fix looks like.

Get an assessment