# PTC patches critical remote code execution flaw in Windchill and FlexPLM

_Published Thursday, November 12, 2026 at 8:25 AM EST · Security · Latest · Tier 2 — Notable_

![PTC patches critical remote code execution flaw in Windchill and FlexPLM — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi01pvi78xYUtyxbtWQ4L5ddMr1yT2-WBSbAnp3wKXa-bpagXqtyQdxPqA43I1NxJGNLk4He30PS-GYUcd1sOaErtMAtNWL-qQUGfD0Y7wSxAzeYJXRf2lA5yFuznu8m2zRgf2llXMiR3w1H6YOOte5qs_DvRxcv0aPeOxWeIDybl1n58VlpuZPUJ0icWDL/s1700-nu-rw-lo-l85-e365/ptc-flaw.jpg)

PTC has released patches for a critical vulnerability in Windchill and FlexPLM that could allow remote code execution through crafted requests, The Hacker News reported. Tracked as CVE-2026-126325, the flaw carries a CVSS v4 severity score of 9.2 out of 10.0 and involves improper input validation and processing of untrusted serialized data.

PTC says it has already applied patches to environments it hosts. Customers running environments elsewhere are urged to apply the patch as soon as possible. The affected versions span Windchill 11.0 M030 through listed releases including 13.1.4.0, and FlexPLM releases including 13.1.3.0.

## Sources

- [The Hacker News](https://thehackernews.com/2026/11/ptc-patches-critical-windchill-and.html)

---
Canonical: https://techandbusiness.org/newswire/nmO7-TwS_o0WNwXJ-LVeEV
Published: 2026-11-12T13:25:22.911Z
Story chronology: 2026-11-12T11:33:00.000Z
Retrieved: 2026-11-12T15:25:35.084Z
Publisher: Tech & Business (techandbusiness.org)