PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution

PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in remote code execution.

The security flaw, tracked as CVE-2026-126325, carries a CVSS v4 score of 9.2 out of a maximum of 10.0.

It has been described as a case of improper input validation and deserialization of untrusted data that could result in