# cve.now: PTC

The newest entries naming PTC as an affected vendor (up to 200), of 31 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-77646](https://cve.now/CVE-2026-77646.md): Server Side Request Forgery (SSRF) vulnerability reported in Windchill (CVSS 7.7)
- [CVE-2026-77645](https://cve.now/CVE-2026-77645.md): Critical Remote Code Execution (RCE) vulnerability reported in Windchill (CVSS 9.2)
- [CVE-2026-77644](https://cve.now/CVE-2026-77644.md): Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition (CVSS 9.3)
- [CVE-2026-12569](https://cve.now/CVE-2026-12569.md): Remote Code Execution (RCE) vulnerability in Windchill PDMlink (CVSS 9.3, KEV)
- [CVE-2026-4681](https://cve.now/CVE-2026-4681.md): Critical Remote Code Execution vulnerability reported in Windchill (CVSS 9.3)
- [CVE-2024-6098](https://cve.now/CVE-2024-6098.md): PTC Kepware ThingWorx Kepware Server Allocation of Resources Without Limits or Throttling (CVSS 5.3)
- [CVE-2024-6071](https://cve.now/CVE-2024-6071.md): PTC Creo Elements/Direct License Server Missing Authorization (CVSS 10.0)
- [CVE-2024-3951](https://cve.now/CVE-2024-3951.md): Cross-site Scripting in PTC Codebeamer (CVSS 7.1)
- [CVE-2023-29447](https://cve.now/CVE-2023-29447.md): Insufficiently Protected Credentials in PTC's Kepware KEPServerEX (CVSS 5.7)
- [CVE-2023-29446](https://cve.now/CVE-2023-29446.md): Improper Input Validation in PTC's Kepware KEPServerEX (CVSS 4.7)
- [CVE-2023-29445](https://cve.now/CVE-2023-29445.md): Uncontrolled Search Path Element in PTC's Kepware KEPServerEX (CVSS 7.8)
- [CVE-2023-29444](https://cve.now/CVE-2023-29444.md): Uncontrolled Search Path Element in PTC's Kepware KEPServerEX (CVSS 6.3)
- [CVE-2023-5909](https://cve.now/CVE-2023-5909.md): Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx (CVSS 7.5)
- [CVE-2023-5908](https://cve.now/CVE-2023-5908.md): Heap Based Buffer Overflow in PTC KEPServerEx (CVSS 9.1)
- [CVE-2023-4296](https://cve.now/CVE-2023-4296.md): PTC Codebeamer Cross site scripting (CVSS 8.8)
- [CVE-2023-3825](https://cve.now/CVE-2023-3825.md): PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads to uncontrolled res (CVSS 7.5)
- [CVE-2023-31200](https://cve.now/CVE-2023-31200.md): PTC Vuforia Studio Cross-Site Request Forgery (CVSS 5.7)
- [CVE-2023-29502](https://cve.now/CVE-2023-29502.md): PTC Vuforia Studio Path Traversal (CVSS 6.2)
- [CVE-2023-27881](https://cve.now/CVE-2023-27881.md): PTC Vuforia Studio Unrestricted Upload of File with Dangerous Type (CVSS 8.0)
- [CVE-2023-29152](https://cve.now/CVE-2023-29152.md): PTC Vuforia Studio Improper Authorization (CVSS 6.2)
- [CVE-2023-24476](https://cve.now/CVE-2023-24476.md): PTC Vuforia Studio Improper Authorization (CVSS 1.8)
- [CVE-2023-29168](https://cve.now/CVE-2023-29168.md): PTC Vuforia Studio Insufficiently Protected Credentials (CVSS 3.7)
- [CVE-2023-0754](https://cve.now/CVE-2023-0754.md): The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely (CVSS 9.8)
- [CVE-2023-0755](https://cve.now/CVE-2023-0755.md): The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remote (CVSS 9.8)
- [CVE-2022-25251](https://cve.now/CVE-2022-25251.md): PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function (CVSS 9.8)
- [CVE-2022-25252](https://cve.now/CVE-2022-25252.md): PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions (CVSS 7.5)
- [CVE-2022-25250](https://cve.now/CVE-2022-25250.md): PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function (CVSS 7.5)
- [CVE-2022-25249](https://cve.now/CVE-2022-25249.md): PTC Axeda agent and Axeda Desktop Server Path Traversal (CVSS 7.5)
- [CVE-2022-25248](https://cve.now/CVE-2022-25248.md): PTC Axeda agent and Axeda Desktop Server Information Exposure (CVSS 5.3)
- [CVE-2022-25246](https://cve.now/CVE-2022-25246.md): PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials (CVSS 9.8)
- [CVE-2022-25247](https://cve.now/CVE-2022-25247.md): PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/ptc
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.