<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>PTC Inc. — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/ptc" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by PTC Inc. (ptc).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/ptc.png</url>
      <title>PTC Inc. — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:08 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-77646 · 7.7 HIGH 🌩️ — Server Side Request Forgery (SSRF) vulnerability reported in Windchill</title>
      <link>https://vulnogram.org/CVE-2026-77646</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77646</guid>
      <description>A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 20 Aug 2026 22:11:25 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77645 · 9.2 CRITICAL 🌩️ — Critical Remote Code Execution (RCE) vulnerability reported in Windchill</title>
      <link>https://vulnogram.org/CVE-2026-77645</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77645</guid>
      <description>A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 20 Aug 2026 22:08:41 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-77644 · 9.3 CRITICAL 🌩️ — Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition</title>
      <link>https://vulnogram.org/CVE-2026-77644</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-77644</guid>
      <description>A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability (WRR) Enterprise Edition.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 20 Aug 2026 21:54:48 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-12569 · 9.3 CRITICAL 💥 🌩️ — Remote Code Execution (RCE) vulnerability in Windchill PDMlink</title>
      <link>https://vulnogram.org/CVE-2026-12569</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-12569</guid>
      <description>A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions * The…</description>
      <category>Critical</category>
      <category>Known Exploited</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 18 Jun 2026 00:11:35 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-4681 · 9.3 CRITICAL 🌩️ — Critical Remote Code Execution vulnerability reported in Windchill</title>
      <link>https://vulnogram.org/CVE-2026-4681</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-4681</guid>
      <description>A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. This issue affects Windchill PDMLink: 11.0 M030, 11.1 M020, 11.…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 23 Mar 2026 21:48:05 GMT</pubDate>
    </item>
  </channel>
</rss>
