PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution

PTC has released patches for a critical vulnerability in its Windchill and FlexPLM software that could allow remote code execution. The flaw, tracked as CVE-2026-126325 with a CVSS v4 score of 9.2, is a case of improper input validation and deserialization of untrusted data.