PTC
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| FlexPLM | 4 | 1 | Aug 20, 2026 |
| Windchill PDMLink | 4 | 1 | Aug 20, 2026 |
| ThingWorx Industrial Connectivity | 8 | – | Jan 10, 2024 |
| ThingWorx Kepware Server | 8 | – | Jan 10, 2024 |
| Axeda Desktop Server for Windows | 7 | – | Mar 16, 2022 |
| Kepware KEPServerEX | 7 | – | Aug 16, 2024 |
| Axeda agent | 7 | – | Mar 16, 2022 |
| Vuforia Studio | 6 | – | Jun 7, 2023 |
| ThingWorx Kepware Edge | 4 | – | Nov 30, 2023 |
| KEPServerEX | 3 | – | Nov 30, 2023 |
| OPC-Aggregator | 2 | – | Nov 30, 2023 |
| Codebeamer | 2 | – | May 8, 2024 |
| ThingWorx Edge C-SDK | 2 | – | Feb 23, 2023 |
| ThingWorx Edge MicroServer (EMS) | 2 | – | Feb 23, 2023 |
| Kepware ThingWorx Kepware Server | 1 | – | Aug 16, 2024 |
| Creo Elements/Direct License | 1 | – | Jun 27, 2024 |
| Windchill Risk and Reliability Enterprise Edition (Formerly Relex) | 1 | – | Aug 20, 2026 |
Exploited and recent CVEs
- CVE-2026-12569 Remote Code Execution (RCE) vulnerability in Windchill PDMlink 46.0%
- CVE-2026-12569 Remote Code Execution (RCE) vulnerability in Windchill PDMlink 46.0%
- CVE-2026-77646 Server Side Request Forgery (SSRF) vulnerability reported in Windchill 0.4%
- CVE-2026-77646 Server Side Request Forgery (SSRF) vulnerability reported in Windchill 0.4%
- CVE-2026-77645 Critical Remote Code Execution (RCE) vulnerability reported in Windchill 0.6%
- CVE-2026-77645 Critical Remote Code Execution (RCE) vulnerability reported in Windchill 0.6%
- CVE-2026-77644 Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition 0.4%
- CVE-2026-4681 Critical Remote Code Execution vulnerability reported in Windchill 0.7%
- CVE-2026-4681 Critical Remote Code Execution vulnerability reported in Windchill 0.7%
- CVE-2024-6098 PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling 0.4%
- CVE-2024-6098 PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling 0.4%
- CVE-2024-6071 PTC Creo Elements/Direct License Server Missing Authorization 1.1%
- CVE-2024-3951 Cross-site Scripting in PTC Codebeamer 0.3%
- CVE-2023-29447 Insufficiently Protected Credentials in PTC's Kepware KEPServerEX 0.4%
- CVE-2023-29447 Insufficiently Protected Credentials in PTC's Kepware KEPServerEX 0.4%
- CVE-2023-29447 Insufficiently Protected Credentials in PTC's Kepware KEPServerEX 0.4%
- CVE-2023-29446 Improper Input Validation in PTC's Kepware KEPServerEX 0.2%
- CVE-2023-29446 Improper Input Validation in PTC's Kepware KEPServerEX 0.2%
- CVE-2023-29446 Improper Input Validation in PTC's Kepware KEPServerEX 0.2%
- CVE-2023-29445 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX 0.2%
- CVE-2023-29445 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX 0.2%
- CVE-2023-29445 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX 0.2%
- CVE-2023-29444 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX 0.2%
- CVE-2023-29444 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX 0.2%
- CVE-2023-29444 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX 0.2%
- CVE-2023-5909 Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx 0.4%
- CVE-2023-5909 Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx 0.4%
- CVE-2023-5909 Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx 0.4%
- CVE-2023-5909 Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx 0.4%
- CVE-2023-5909 Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx 0.4%