Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569)

Cl0p ransomware affiliates are actively exploiting a critical zero-day in PTC Windchill and FlexPLM (CVE-2026-12569) to achieve unauthenticated remote code execution, deploy webshells, and steal sensitive data for double-extortion attacks against manufacturing, automotive, aerospace, and retail organizations.