CISA Adds Critical Cisco and PTC Windchill Vulnerabilities to Exploited Flaws Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, affecting Cisco and PTC Windchill and FlexPLM products. One of the flaws listed is CVE-2026-12569, described as a critical remote vulnerability, though further technical details were not disclosed in the notice. The inclusion in the KEV catalog indicates active exploitation or a significant risk of compromise. No specific dates for exploitation or patch deadlines were provided in the announcement. The action targets U.S. federal agencies and critical infrastructure entities to prioritize remediation efforts.