First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild

CISA has added CVE-2026-12569, a remote code execution flaw in PTC Windchill, to its Known Exploited Vulnerabilities catalog after observing the first confirmed in-the-wild exploitation. Windchill is widely used for product lifecycle management in manufacturing and engineering organizations. Affected organizations should prioritize patching per CISA’s KEV timeline rather than treating this as routine maintenance.