Quick answers
- Is CVE-2026-77644 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-77644 being exploited in the wild.
- How severe is CVE-2026-77644?
- Informational severity, published 20 August 2026.
- Which products and versions are affected?
- PTC Windchill Risk and Reliability Enterprise Edition.
- Is there a fix for CVE-2026-77644?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-77644 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-77644?
- Check whether you run PTC Windchill Risk and Reliability at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
This vulnerability is classified as an access control bypass in PTC Windchill Risk and Reliability Enterprise Edition. The vulnerability allows attackers to circumvent authentication or authorization controls, gaining unauthorized access to protected resources or functionality. Without additional detail from the advisory sources, the specific attack vector and preconditions remain unclear, though the critical severity rating suggests the bypass is exploitable with minimal user interaction or special privileges. Patch availability and specific technical vectors should be confirmed through PTC's security advisory (CS474818), which was inaccessible at the time of analysis.
Affected products
- PTC Windchill Risk and Reliability Enterprise Edition
Timeline
- 2026-08-20: disclosed