CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue

The US Cybersecurity and Infrastructure Security Agency has added a critical remote code execution vulnerability in PTC Windchill to its Known Exploited Vulnerabilities catalog. This vulnerability affects PTC Windchill PDMlink and PTC FlexPLM enterprise software, which are used for Product Data Management and Product Lifecycle Management. The agency cited evidence of active exploitation of this flaw. The addition to the catalog comes as web shell attacks continue. The vulnerability allows for remote code execution, posing a significant risk to affected systems.