8 results
9.3Critical
CVE-2026-12569 KEV Used in ransomware

Remote Code Execution (RCE) vulnerability in Windchill PDMlink

PTC Windchill PDMLink; PTC FlexPLM

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.  * This advisory also applies to all CPS versions * The ide…

46%EPSS
9.3Critical
CVE-2026-4681

Critical Remote Code Execution vulnerability reported in Windchill

PTC Windchill PDMLink; PTC FlexPLM

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. This issue affects Windchill PDMLink: 11.0 M030, 11.1 M020, 11.2.1.0, 1…

9.8Critical
CVE-2023-0754
PTC ThingWorx Edge C-SDK; Microsoft .NET-SDK; PTC ThingWorx Edge MicroServer (EMS); PTC Kepware KEPServerEX

The affected products are vulnerable to an integer overflow or wraparound, which could  allow an attacker to crash the server and remotely execute arbitrary code.

2.9%EPSS
9.8Critical
CVE-2023-0755
PTC ThingWorx Edge C-SDK; Microsoft .NET-SDK; PTC ThingWorx Edge MicroServer (EMS); PTC Kepware KEPServerEX

The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.

12%EPSS