{"uuid": "0549546c-7c0b-487f-8ef6-496183a41f12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1665", "content": "\ud83d\udd34 First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild\n\nThe vulnerability is tracked as CVE-2026-12569 and it affects PTC\u2019s Windchill and FlexPLM products. The improper input validation flaw can be exploited by a remote, unauthenticated attacker to execute arbitrary code via specially crafted requests.\n\nThe cybersecurity agency CISA added the security hole to its Known Exploited Vulnerabilities (KEV) catalog, instructing federal agencies to address it by June 28.\n\nThis is the first-ever PTC product vulnerability added to CISA\u2019s KEV catalog, and there do not appear to be any public reports describing the exploitation of other flaws.", "creation_timestamp": "2026-08-23T00:00:41.966094Z"}