CVE-2026-77644

Received Received - Intake

Bypass Access Control in PTC Windchill Risk and Reliability Enterprise Edition

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: PTC

Description

A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability (WRR) Enterprise Edition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-20

Last Modified

2026-08-20

Generated

2026-08-21

AI Q&A

2026-08-21

EPSS Evaluated

N/A

NVD

CVE-2026-77644

EUVD

EUVD-2026-63718

Affected Vendors & Products

Vendor	Product	Version / Range
ptc	windchill_risk_and_reliability	------*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-620	When setting a new password for a user, the product does not require knowledge of the original password, or using another form of authentication.
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This is a critical bypass access control vulnerability in PTC Windchill Risk and Reliability (WRR) Enterprise Edition. It allows unauthorized access to sensitive functions due to improper access restrictions.

Impact Analysis

An attacker could exploit this to gain unauthorized access to critical system functions, potentially leading to data breaches, system manipulation, or disruption of services.

Compliance Impact

This vulnerability could lead to unauthorized data access or exposure, violating compliance requirements for data protection and security in standards like GDPR and HIPAA.

Mitigation Strategies

Apply the latest security patches or updates provided by PTC for Windchill Risk and Reliability Enterprise Edition immediately. Disable unnecessary network access to the system until patched. Monitor official PTC advisories for specific mitigation guidance.

Hi! I’m here to help you understand CVE-2026-77644. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70