ICSA-26-085-03

icsaUScisa_csaf_ot

PTC Windchill Product Lifecycle Management

view advisory published 2026-03-26

Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-4681US——
A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted…
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

  • MitigationFlexPLM

    Customers using Microsoft IIS should only follow "IIS Configuration - Workaround Steps" section steps

  • MitigationWindchill PDMLink

    Customers using Microsoft IIS should only follow "IIS Configuration - Workaround Steps" section steps

  • FixedFlexPLM

    Apply the same precautions to FlexPLM deployments

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan