<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-28T09:33:33.800427+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9d018bf0-f35a-45a9-be65-77075693920d/export</id>
    <title>9d018bf0-f35a-45a9-be65-77075693920d</title>
    <updated>2026-07-28T09:33:33.818620+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9d018bf0-f35a-45a9-be65-77075693920d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mrol5qyops2t", "content": "\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u30b0\u30eb\u30fc\u30d7 Clop\uff08Cl0p\uff09\u304cPTC Windchill\u30fbFlexPLM\u3092\u6a19\u7684\u306b\u30c7\u30fc\u30bf\u7a83\u53d6\u653b\u6483-CVE-2026-12569\uff08CVSS 9.3\uff09\u3092\u60aa\u7528\u3001\u88fd\u9020\u696d\u306e\u88fd\u54c1\u8a2d\u8a08\u30c7\u30fc\u30bf\u304c\u72d9\u308f\u308c\u308b\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #cyberattack", "creation_timestamp": "2026-07-28T04:29:10.576643Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9d018bf0-f35a-45a9-be65-77075693920d/export"/>
    <published>2026-07-28T04:29:10.576643+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/287c9f21-9765-4fa9-8bb6-619015f9cae3/export</id>
    <title>287c9f21-9765-4fa9-8bb6-619015f9cae3</title>
    <updated>2026-07-28T09:33:33.821362+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "287c9f21-9765-4fa9-8bb6-619015f9cae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12569", "type": "seen", "source": "https://bsky.app/profile/seraphimnews.bsky.social/post/3mrob22uaj227", "content": "CVE-2026-12569: Kerentanan Kritis PTC Windchill Dieksploitasi Afiliasi Cl0p \u2014 CVSS 9.3, RCE Tanpa Autentikasi Ancam Sektor Aerospace, Otomotif, dan Manufaktur\n\nhttps://www.seraphimnews.my.id/blog/ptc-windchill-cve-2026-12569-cl0p-rce-juli-2026", "creation_timestamp": "2026-07-28T01:28:05.229548Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/287c9f21-9765-4fa9-8bb6-619015f9cae3/export"/>
    <published>2026-07-28T01:28:05.229548+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/855aabf0-47dd-40b1-a2df-eed55026b457/export</id>
    <title>855aabf0-47dd-40b1-a2df-eed55026b457</title>
    <updated>2026-07-28T09:33:33.821454+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "855aabf0-47dd-40b1-a2df-eed55026b457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrnfj4blwa2m", "content": "Cl0p affiliates are exploiting CVE-2026-12569 in PTC Windchill and FlexPLM, chaining flaws to gain RCE, drop JSP webshells, and steal data from aerospace, automotive, manufacturing, and retail firms. #Cl0p #PTC #Windchill", "creation_timestamp": "2026-07-27T17:15:26.008128Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/855aabf0-47dd-40b1-a2df-eed55026b457/export"/>
    <published>2026-07-27T17:15:26.008128+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aea96748-4e23-4ca6-97e1-7fad0f08f583/export</id>
    <title>aea96748-4e23-4ca6-97e1-7fad0f08f583</title>
    <updated>2026-07-28T09:33:33.821522+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aea96748-4e23-4ca6-97e1-7fad0f08f583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mrmz66hfqd2s", "content": "Cl0p affiliates exploit CVE-2026-12569 in PTC Windchill and FlexPLM for unauthenticated RCE, deploying JSP webshells and extorting victims with data theft.\n", "creation_timestamp": "2026-07-27T13:34:33.334411Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aea96748-4e23-4ca6-97e1-7fad0f08f583/export"/>
    <published>2026-07-27T13:34:33.334411+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/37e3e073-197a-4af9-9b8a-16e7e7d14dc5/export</id>
    <title>37e3e073-197a-4af9-9b8a-16e7e7d14dc5</title>
    <updated>2026-07-28T09:33:33.821592+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "37e3e073-197a-4af9-9b8a-16e7e7d14dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mrmjpaz47s2r", "content": "Cl0p sfrutta CVE-2026-12569 (CVSS 9.3) in PTC Windchill/FlexPLM: RCE non autenticata via WSDL info disclosure + login servlet, webshell JSP. Prima exploitation confermata su un prodotto PTC. Colpiti manufacturing, automotive, aerospace \u2014 rischio supply-chain IT/EU. In CISA KEV. #infosec", "creation_timestamp": "2026-07-27T08:57:46.291968Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/37e3e073-197a-4af9-9b8a-16e7e7d14dc5/export"/>
    <published>2026-07-27T08:57:46.291968+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9893a50d-a8cb-4655-bb11-231684bb618d/export</id>
    <title>9893a50d-a8cb-4655-bb11-231684bb618d</title>
    <updated>2026-07-28T09:33:33.821657+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9893a50d-a8cb-4655-bb11-231684bb618d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mrmcf6zg7seh", "content": "Cl0p\u306e\u30a2\u30d5\u30a3\u30ea\u30a8\u30a4\u30c8\u304c\u8a8d\u8a3c\u4e0d\u8981\u306eRCE\u8106\u5f31\u6027\u3092\u60aa\u7528\u3001\u9732\u51fa\u3057\u305fPTC Windchill\u3068FlexPLM\u3092\u6a19\u7684\u306b\uff08CVE-2026-12569\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/46859/", "creation_timestamp": "2026-07-27T06:46:59.146602Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9893a50d-a8cb-4655-bb11-231684bb618d/export"/>
    <published>2026-07-27T06:46:59.146602+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d200b1f2-cfd6-43ad-bb66-2743eb91bced/export</id>
    <title>d200b1f2-cfd6-43ad-bb66-2743eb91bced</title>
    <updated>2026-07-28T09:33:33.821719+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d200b1f2-cfd6-43ad-bb66-2743eb91bced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116987720032118528", "content": "Cl0p Exploitation of PTC Windchill &amp;amp; FlexPLM (CVE-2026-12569)#Cl0p #CVE_2026_12569 https://ransom-isac.org/blog/clop-windchill-flexplm-exploitation/", "creation_timestamp": "2026-07-26T18:35:43.217960Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d200b1f2-cfd6-43ad-bb66-2743eb91bced/export"/>
    <published>2026-07-26T18:35:43.217960+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8b97f7ac-a203-4e60-b408-71018d896078/export</id>
    <title>8b97f7ac-a203-4e60-b408-71018d896078</title>
    <updated>2026-07-28T09:33:33.821779+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8b97f7ac-a203-4e60-b408-71018d896078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrjm3uyai72n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-63030: 59 interactions\nCVE-2026-60137: 48 interactions\nCVE-2026-50522: 42 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-30623: 7 interactions\nCVE-2026-58662: 4 interactions\nCVE-2026-12569: 2 interactions\n", "creation_timestamp": "2026-07-26T05:02:38.098654Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8b97f7ac-a203-4e60-b408-71018d896078/export"/>
    <published>2026-07-26T05:02:38.098654+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/96691612-167e-46c3-8eb6-1c35f68326b0/export</id>
    <title>96691612-167e-46c3-8eb6-1c35f68326b0</title>
    <updated>2026-07-28T09:33:33.821839+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "96691612-167e-46c3-8eb6-1c35f68326b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mribqc63i72f", "content": "Cl0p Exploitation of PTC Windchill &amp;amp; FlexPLM (CVE-2026-12569)", "creation_timestamp": "2026-07-25T16:24:32.100700Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/96691612-167e-46c3-8eb6-1c35f68326b0/export"/>
    <published>2026-07-25T16:24:32.100700+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/338f97ee-7eb9-402a-a55f-b0fcd7722e83/export</id>
    <title>338f97ee-7eb9-402a-a55f-b0fcd7722e83</title>
    <updated>2026-07-28T09:33:33.821901+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "338f97ee-7eb9-402a-a55f-b0fcd7722e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrhnbuwvin2w", "content": "Cl0p exploits PTC Windchill flaw CVE-2026-12569, targeting manufacturing and retail sectors. Patch systems urgently to prevent breaches. #Cl0p #Ransomware #PTC #Windchill #CyberSecurity #DataBreach thedailytechfeed.com/cl0p-ransomw...", "creation_timestamp": "2026-07-25T10:18:34.550289Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/338f97ee-7eb9-402a-a55f-b0fcd7722e83/export"/>
    <published>2026-07-25T10:18:34.550289+00:00</published>
  </entry>
</feed>
