Access Control Bypass in PTC Windchill Risk and Reliability Enterprise Edition
CVE-2026-77644

9.3CRITICAL

Key Information:

Vendor

Ptc

Status
Windchill Risk And Reliability Enterprise Edition (formerly Relex)
Vendor
CVE Published:
20 August 2026

What is CVE-2026-77644?

An access control bypass vulnerability has been identified in PTC Windchill Risk and Reliability Enterprise Edition, potentially allowing unauthorized users to access restricted resources. This shortcoming emphasizes the importance of implementing robust access controls to protect sensitive data and systems. Users are advised to review their access permissions and apply necessary security measures to mitigate potential risks.

Affected Version(s)

Windchill Risk and Reliability Enterprise Edition (Formerly Relex) 11.1 <= 13.1

References

https://www.ptc.com/en/support/article/CS474818
vendor-advisorypermissions-required

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Romain J. of Devoteam - Purple
.