#5
The Hacker News
general
June 26, 2026 at 12:31 UTC
CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
By [email protected] (The Hacker News)
AI Summary
CISA added CVE-2026-12569, a critical remote code execution flaw in PTC Windchill PDMlink and PTC FlexPLM, to its Known Exploited Vulnerabilities catalog after confirming active in-the-wild exploitation via web shell attacks. PTC Windchill is widely deployed in industrial and manufacturing environments, making this the first confirmed exploitation of this product and a significant OT/ICS supply chain risk.
Relevance score: 84.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →