<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-27T09:54:06.266166+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/44b467de-1a2f-4544-95b9-a3ecb412c912/export</id>
    <title>44b467de-1a2f-4544-95b9-a3ecb412c912</title>
    <updated>2026-06-27T09:54:06.301024+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "44b467de-1a2f-4544-95b9-a3ecb412c912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mp6vknvr4w26", "content": "CISA added the PTC Windchill CVE-2026-12569 remote execution flaw to its known exploited list. Another day, another critical vulnerability being actively abused in the wild.\n\n#windchillrce #patchingagain", "creation_timestamp": "2026-06-26T12:02:20.840603Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/44b467de-1a2f-4544-95b9-a3ecb412c912/export"/>
    <published>2026-06-26T12:02:20.840603+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fb3eca59-ecb7-4338-830b-c66c8e476fc4/export</id>
    <title>fb3eca59-ecb7-4338-830b-c66c8e476fc4</title>
    <updated>2026-06-27T09:54:06.300921+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fb3eca59-ecb7-4338-830b-c66c8e476fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mp6vkqlzcj22", "content": "CISA has kindly added the remote code execution flaw CVE-2026-12569 in PTC Windchill to its ever-expanding catalog of active threats. This means the wild exploits are officially running amok, affecting unfortunate enterprises relying on this software. Protecting ourselves from th...\n\nRead full story", "creation_timestamp": "2026-06-26T12:02:21.954214Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fb3eca59-ecb7-4338-830b-c66c8e476fc4/export"/>
    <published>2026-06-26T12:02:21.954214+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c61b2285-cb07-4708-a1f1-19f54e44b0d6/export</id>
    <title>c61b2285-cb07-4708-a1f1-19f54e44b0d6</title>
    <updated>2026-06-27T09:54:06.300797+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c61b2285-cb07-4708-a1f1-19f54e44b0d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mp6vkw2kgo2r", "content": "CISA adds CVE-2026-12569 to the KEV catalog as adversaries actively exploit PTC Windchill &amp;amp; FlexPLM input validation vulnerabilities. Lock down your supply chain assets. Full forensic indicators, lateral movement tracking, and active endpoint hardening protocols are live:\u2026", "creation_timestamp": "2026-06-26T12:02:26.103473Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c61b2285-cb07-4708-a1f1-19f54e44b0d6/export"/>
    <published>2026-06-26T12:02:26.103473+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5cbd62a1-f72f-438f-aeb8-27eaeb1f1e59/export</id>
    <title>5cbd62a1-f72f-438f-aeb8-27eaeb1f1e59</title>
    <updated>2026-06-27T09:54:06.300670+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5cbd62a1-f72f-438f-aeb8-27eaeb1f1e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mp6zgoti4k2p", "content": "CISA adds CVE-2026-12569 to the KEV catalog as adversaries actively exploit PTC Windchill &amp;amp; FlexPLM platforms. This is an immediate threat to supply chain integrity and intellectual property. Access our complete executive risk mitigation framework for corporate leadership:\u2026", "creation_timestamp": "2026-06-26T13:11:39.052326Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5cbd62a1-f72f-438f-aeb8-27eaeb1f1e59/export"/>
    <published>2026-06-26T13:11:39.052326+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b4a8d3f1-47d4-49a6-8f76-3f54e531043b/export</id>
    <title>b4a8d3f1-47d4-49a6-8f76-3f54e531043b</title>
    <updated>2026-06-27T09:54:06.300527+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b4a8d3f1-47d4-49a6-8f76-3f54e531043b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mp727buqmn2t", "content": "CISA added CVE-2026-12569 to KEV after evidence of active exploitation of PTC Windchill and FlexPLM systems via malicious requests.\n", "creation_timestamp": "2026-06-26T13:25:24.469663Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b4a8d3f1-47d4-49a6-8f76-3f54e531043b/export"/>
    <published>2026-06-26T13:25:24.469663+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c25268cb-a0fc-47d1-a986-01f27e4aa681/export</id>
    <title>c25268cb-a0fc-47d1-a986-01f27e4aa681</title>
    <updated>2026-06-27T09:54:06.300378+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c25268cb-a0fc-47d1-a986-01f27e4aa681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116816986268752727", "content": "\ud83d\udcf0 CISA Adds Actively Exploited PTC and Cisco Flaws to KEV Catalog, Mandates Federal Patching\n\ud83d\udce2 CISA adds two actively exploited vulnerabilities to its KEV catalog: CVE-2026-12569 in PTC products and CVE-2026-20230 in Cisco UCM. Federal agencies are mandated to patch. All orgs should prioritize these now! \u26a0\ufe0f #CyberSecurity #Vulnerability #CI...\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-actively-exploited-ptc-and-cisco-flaws-to-kev-cata\u2026", "creation_timestamp": "2026-06-26T14:55:55.843061Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c25268cb-a0fc-47d1-a986-01f27e4aa681/export"/>
    <published>2026-06-26T14:55:55.843061+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0ec3f548-3318-4915-b86e-99f07a4ac55b/export</id>
    <title>0ec3f548-3318-4915-b86e-99f07a4ac55b</title>
    <updated>2026-06-27T09:54:06.300251+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0ec3f548-3318-4915-b86e-99f07a4ac55b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mp77bxemxo2f", "content": "\ud83d\udce2 CISA adds two actively exploited vulnerabilities to its KEV catalog: CVE-2026-12569 in PTC products and CVE-2026-20230 in Cisco UCM. Federal agencies are mandated to patch. All orgs should prioritize these now! \u26a0\ufe0f #CyberSecurity #Vulnerability #CI...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-26T14:56:22.718008Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0ec3f548-3318-4915-b86e-99f07a4ac55b/export"/>
    <published>2026-06-26T14:56:22.718008+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ccb07665-b7c4-4a58-9a94-bcd65a15ef6a/export</id>
    <title>ccb07665-b7c4-4a58-9a94-bcd65a15ef6a</title>
    <updated>2026-06-27T09:54:06.300113+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ccb07665-b7c4-4a58-9a94-bcd65a15ef6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mp7ffsykag2s", "content": "\ud83e\udd16 CISA adds CVE-2026-12569 (PTC Windchill RCE) to KEV \u2014 actively exploited. Unauthenticated RCE deploys JSP web shells in enterprise PDM/PLM systems.\nhttps://thehackernews.com/2026/06/cisa-adds-exploited-ptc-windchill-rce.html", "creation_timestamp": "2026-06-26T16:45:54.714735Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ccb07665-b7c4-4a58-9a94-bcd65a15ef6a/export"/>
    <published>2026-06-26T16:45:54.714735+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/79cf9c4a-f7f3-4dad-a2a2-78f18a589723/export</id>
    <title>79cf9c4a-f7f3-4dad-a2a2-78f18a589723</title>
    <updated>2026-06-27T09:54:06.299926+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "79cf9c4a-f7f3-4dad-a2a2-78f18a589723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mp7fjtd7k72h", "content": "\ud83d\udd34 EXPLOITED\n\nThe server holding your product blueprints can be taken over with no password.\n\nCISA just put PTC Windchill on its must-patch list, and web shells are landing on the login page.\n\nRun Windchill or FlexPLM? Patch to 11.0 M030 by Sunday. (CVE-2026-12569)", "creation_timestamp": "2026-06-26T16:48:09.407862Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/79cf9c4a-f7f3-4dad-a2a2-78f18a589723/export"/>
    <published>2026-06-26T16:48:09.407862+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f124401b-378f-4ca1-aecb-1fd5f46fec0f/export</id>
    <title>f124401b-378f-4ca1-aecb-1fd5f46fec0f</title>
    <updated>2026-06-27T09:54:06.296151+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f124401b-378f-4ca1-aecb-1fd5f46fec0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mpaix7pvdv2b", "content": "PTC Windchill Under Siege: 93 CVSS RCE Flaw (CVE-2026-12569) Actively Exploited for JSP Web Shell Deployment \u2013 CISA KEV Adds Urgency +\u00a0Video\n\nIntroduction: A critical remote code execution vulnerability in PTC Windchill PDMLink and FlexPLM enterprise Product Lifecycle Management (PLM) solutions is\u2026", "creation_timestamp": "2026-06-27T03:22:00.190360Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f124401b-378f-4ca1-aecb-1fd5f46fec0f/export"/>
    <published>2026-06-27T03:22:00.190360+00:00</published>
  </entry>
</feed>
