vulnerability
CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
Critical
Summary
CISA has added a critical remote code execution (RCE) vulnerability, CVE-2026-12569, affecting PTC Windchill PDMlink and FlexPLM to its Known Exploited Vulnerabilities (KEV) catalog. This vulnerability, stemming from improper input validation, is being actively exploited by threat actors deploying JSP web shells. The situation underscores the rapid weaponization of newly disclosed vulnerabilities by malicious actors.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data