PTC Windchill

Clop Deploys Custom Web Shell in PTC Windchill Extortion Attacks Clop web shell exploiting PTC Windchill CVE-2026-12569 to steal credentials and engineering data

Clop Deploys Custom Web Shell in PTC Windchill Extortion Attacks

Do Son August 25, 2026

At a glance Malware family Custom Java web shell (unnamed implant) Threat actor Clop / Cl0p (highly...

CISA Adds Cisco Unified CM and PTC Windchill Flaws to KEV Catalog CISA KEV Catalog adding CVE-2026-20230 Cisco Unified CM and CVE-2026-12569 PTC Windchill vulnerabilities

CISA KEV Catalog adding CVE-2026-20230 Cisco Unified CM and CVE-2026-12569 PTC Windchill vulnerabilities

CISA Adds Cisco Unified CM and PTC Windchill Flaws to KEV Catalog

Do Son June 26, 2026

TL;DR The CISA KEV Catalog gained two new entries on June 25, 2026. Both additions cite evidence...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-76460CVSS 10.0
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-89026CVSS 9.8
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT...
Admin intel📅 Updated: Sep 16, 2026
CVE-2026-58704
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-87886
Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-87827CVSS 10.0
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-78006CVSS 9.8
The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to,...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-39364
Vite is a frontend tooling framework for JavaScript. From 7.1.0 to before 7.3.2 and 8.0.5, on the Vite...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-27540CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture...
Admin intel📅 Updated: Sep 15, 2026

CVE-2026-20325CVSS 9.9
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has...
📅 Updated: Sep 18, 2026
CVE-2026-69843CVSS 10.0
No description available
📅 Updated: Sep 18, 2026
CVE-2026-85878CVSS 9.9
No description available
📅 Updated: Sep 18, 2026
CVE-2026-70009CVSS 9.3
No description available
📅 Updated: Sep 18, 2026
CVE-2026-70200CVSS 10.0
No description available
📅 Updated: Sep 18, 2026
CVE-2026-85885CVSS 9.9
No description available
📅 Updated: Sep 18, 2026
CVE-2026-85889CVSS 10.0
No description available
📅 Updated: Sep 18, 2026
CVE-2026-87701CVSS 9.6
No description available
📅 Updated: Sep 18, 2026