PTC vulnerabilities

31 published CVEs name PTC among the affected products; CISA lists 1 of them as exploited in the wild.

Critical 11High 10Medium 8Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-12569
Remote Code Execution (RCE) vulnerability in Windchill PDMlink
PTC · Windchill PDMLink
ExploitedCritical9.3

CVE-2026-77646
Server Side Request Forgery (SSRF) vulnerability reported in Windchill
PTC · Windchill PDMLink
High7.7
CVE-2026-77645
Critical Remote Code Execution (RCE) vulnerability reported in Windchill
PTC · Windchill PDMLink
Critical9.2
CVE-2026-77644
Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition
PTC · Windchill Risk and Reliability Enterprise Edition (Formerly Relex)
Critical9.3
CVE-2026-12569
Remote Code Execution (RCE) vulnerability in Windchill PDMlink
PTC · Windchill PDMLink
ExploitedCritical9.3
CVE-2026-4681
Critical Remote Code Execution vulnerability reported in Windchill
PTC · Windchill PDMLink
Critical9.3
CVE-2024-6098
PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling
PTC · Kepware ThingWorx Kepware Server
Medium5.9
CVE-2024-6071
PTC Creo Elements/Direct License Server Missing Authorization
PTC · Creo Elements/Direct License
Critical10.0
CVE-2024-3951
Cross-site Scripting in PTC Codebeamer
PTC · Codebeamer
High7.1
CVE-2023-29447
Insufficiently Protected Credentials in PTC's Kepware KEPServerEX
PTC · Kepware KEPServerEX
Medium5.7
CVE-2023-29446
Improper Input Validation in PTC's Kepware KEPServerEX
PTC · Kepware KEPServerEX
Medium4.7