PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution

PTC has issued patches for a critical vulnerability in Windchill and FlexPLM software that could allow remote code execution if exploited. The vulnerability is identified as CVE-2026-126325 and has a CVSS v4 score of 9.2, indicating a high level of severity. It is caused by improper input validation and deserialization of untrusted data. This flaw could be leveraged by attackers to execute code remotely. PTC's patches address this issue, mitigating the risk of exploitation. The vulnerability's high CVSS score reflects its potential for significant impact.