Threat Intelligence Report

Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569)

📅 July 31, 2026 📰 ransom-isac.org 🔍 1 CVE(s) referenced

Cl0p ransomware affiliates are actively exploiting a critical zero-day (CVE-2026-12569) in internet-exposed PTC Windchill and FlexPLM deployments, chaining pre-auth information disclosure and remote code execution flaws to deploy webshells and steal sensitive data for double-extortion attacks across multiple industries.

org

CVE-2026-12569

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle