PTC

Products

ProductCVEsExploitedLatest
FlexPLM41Aug 20, 2026
Windchill PDMLink41Aug 20, 2026
ThingWorx Industrial Connectivity8–Jan 10, 2024
ThingWorx Kepware Server8–Jan 10, 2024
Axeda Desktop Server for Windows7–Mar 16, 2022
Kepware KEPServerEX7–Aug 16, 2024
Axeda agent7–Mar 16, 2022
Vuforia Studio6–Jun 7, 2023
ThingWorx Kepware Edge4–Nov 30, 2023
KEPServerEX3–Nov 30, 2023
OPC-Aggregator2–Nov 30, 2023
Codebeamer2–May 8, 2024
ThingWorx Edge C-SDK2–Feb 23, 2023
ThingWorx Edge MicroServer (EMS)2–Feb 23, 2023
Kepware ThingWorx Kepware Server1–Aug 16, 2024
Creo Elements/Direct License1–Jun 27, 2024
Windchill Risk and Reliability Enterprise Edition (Formerly Relex)1–Aug 20, 2026

Exploited and recent CVEs

  • CVE-2026-12569 Critical 9.3 Exploited Remote Code Execution (RCE) vulnerability in Windchill PDMlink 46.0%
  • CVE-2026-12569 Critical 9.3 Exploited Remote Code Execution (RCE) vulnerability in Windchill PDMlink 46.0%
  • CVE-2026-77646 High 7.7 Server Side Request Forgery (SSRF) vulnerability reported in Windchill 0.4%
  • CVE-2026-77646 High 7.7 Server Side Request Forgery (SSRF) vulnerability reported in Windchill 0.4%
  • CVE-2026-77645 Critical 9.2 Critical Remote Code Execution (RCE) vulnerability reported in Windchill 0.6%
  • CVE-2026-77645 Critical 9.2 Critical Remote Code Execution (RCE) vulnerability reported in Windchill 0.6%
  • CVE-2026-77644 Critical 9.3 Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition 0.4%
  • CVE-2026-4681 Critical 9.3 Critical Remote Code Execution vulnerability reported in Windchill 0.7%
  • CVE-2026-4681 Critical 9.3 Critical Remote Code Execution vulnerability reported in Windchill 0.7%
  • CVE-2024-6098 Medium 5.3 PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling 0.4%
  • CVE-2024-6098 Medium 5.3 PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling 0.4%
  • CVE-2024-6071 Critical 10.0 PTC Creo Elements/Direct License Server Missing Authorization 1.1%
  • CVE-2024-3951 High 7.1 Cross-site Scripting in PTC Codebeamer 0.3%
  • CVE-2023-29447 Medium 5.7 Insufficiently Protected Credentials in PTC's Kepware KEPServerEX 0.4%
  • CVE-2023-29447 Medium 5.7 Insufficiently Protected Credentials in PTC's Kepware KEPServerEX 0.4%
  • CVE-2023-29447 Medium 5.7 Insufficiently Protected Credentials in PTC's Kepware KEPServerEX 0.4%
  • CVE-2023-29446 Medium 4.7 Improper Input Validation in PTC's Kepware KEPServerEX 0.2%
  • CVE-2023-29446 Medium 4.7 Improper Input Validation in PTC's Kepware KEPServerEX 0.2%
  • CVE-2023-29446 Medium 4.7 Improper Input Validation in PTC's Kepware KEPServerEX 0.2%
  • CVE-2023-29445 High 7.8 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX 0.2%
  • CVE-2023-29445 High 7.8 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX 0.2%
  • CVE-2023-29445 High 7.8 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX 0.2%
  • CVE-2023-29444 Medium 6.3 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX 0.2%
  • CVE-2023-29444 Medium 6.3 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX 0.2%
  • CVE-2023-29444 Medium 6.3 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX 0.2%
  • CVE-2023-5909 High 7.5 Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx 0.4%
  • CVE-2023-5909 High 7.5 Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx 0.4%
  • CVE-2023-5909 High 7.5 Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx 0.4%
  • CVE-2023-5909 High 7.5 Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx 0.4%
  • CVE-2023-5909 High 7.5 Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx 0.4%