CISA Adds Actively Exploited PTC Windchill RCE Flaw (CVE-2026-12569) to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution (RCE) vulnerability, CVE-2026-12569, affecting PTC Windchill PDMlink and PTC FlexPLM software to its Known Exploited Vulnerabilities (KEV) catalog. This addition highlights active exploitation of the flaw, which allows attackers to execute arbitrary code by sending malicious requests.