This vulnerability (CVE-2026-77644) affects PTC Windchill Risk and Reliability Enterprise Edition (formerly Relex) version 11.1. It is classified under CWE-306 (Missing Authentication for Critical Function) and CWE-620 (Unverified Password Change). The flaw allows bypassing access controls on critical functions without authentication, potentially enabling unauthorized users to perform sensitive operations. The CVSS 4.0 vector indicates the attack can be performed remotely over the network without privileges or user interaction, with high impact on confidentiality, integrity, and availability. The vendor has not provided a remediation level or patch information as of the publication date.

The vulnerability allows an attacker to bypass authentication controls on critical functions, potentially leading to unauthorized access and manipulation of sensitive data or system functions. Given the high CVSS score (9.3), the impact on confidentiality, integrity, and availability is high. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected system and monitor for unusual activity related to critical functions. Follow vendor communications closely for updates on patches or mitigations.