CVE-2026-77646 in Windchill PDMLink

Resumen

por MITRE • 2026-08-21

A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: PTC
• Reservar: 2026-08-21
• Divulgación: 2026-08-21
• Moderación: aceptado
• Artículo: VDB-393951
• CPE: listo
• CWE: CWE-918 (confirmado)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-77646
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77646
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-77646/