A Chill in the Air: Cl0p Targets Windchill, Another Enterprise Software Product

Executive Summary Introduction On July 22, 2026, ReliaQuest reported observations of a threat actor exploiting CVE-2026-12569, a critical remote code execution (RCE, 9.8) vulnerability affecting product lifecycle management software PTC Windchill and FlexPLM. This CVE was disclosed on June 17, 2026, and according to the Ransom-ISAC, it’s likely that this vulnerability was exploited in early […] The post A Chill in the Air: Cl0p Targets Windchill, Another Enterprise Software Product appeared first on Censys .