A critical remote code execution vulnerability (CVE-2026-126325) affects PTC Windchill and PTC FlexPLM. The flaw arises from unsafe deserialization of untrusted data, allowing an attacker to execute arbitrary code remotely. The vulnerability has a CVSS score of 9.0, indicating high impact on confidentiality, integrity, and availability. No affected versions or patch information are provided. No known exploits in the wild have been reported.