{"id":"CVE-2026-77645","title":"A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM","summary":"A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.","severity":"none","cwe":["CWE-20","CWE-502"],"published":"2026-08-20","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:52:04.827","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-77645","references":[{"url":"https://www.ptc.com/en/support/article/CS474826","label":"0b655efc-079c-4cb9-9e8d-164871239f4e"}],"tags":["nvd"],"epss":0.00472,"epssPercentile":0.40008,"ingestedAt":"2026-09-09T16:14:05.514Z","slug":"CVE-2026-77645","body":"## Overview\n\nA critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}