Post #4366955

Active data-theft campaign exploits critical unauthenticated RCE CVE-2026-12569 in PTC Windchill and FlexPLM, deploying JSP webshells to exfiltrate sensitive product data. https://deafnews.it/en/article/data-theft-campaign-targets-windchill-and-flexplm-via-cve-2026-12569-rce