Question 1

What is CVE-2026-12569 — PTC Windchill and FlexPLM Improper Input Validation Vulnerability?

Accepted Answer

PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary code by sending a malicious request to the network.

Question 2

What is the authoritative source for CVE-2026-12569?

Accepted Answer

PTC Windchill and FlexPLM Improper Input Validation Vulnerability (CVE-2026-12569) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	9.8 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	46.05% probability of exploitation · percentile 98.8% · 2026-10-06T12:00:23Z
Last modified	2026-08-01

CVE-2026-12569PTC Windchill and FlexPLM Improper Input Validation Vulnerability

Description

Scoring

CISA KEV entry