EUVD-2026-63718
GHSA-5hvp-9mcx-5245
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:M/U:Red
Missing authentication (CWE-306) on a network-reachable function gives AV:N/AC:L/PR:N/UI:N, with high C/I/A impact matching the reported authentication bypass; scope unchanged.
Primary rating from Vendor (0b655efc-079c-4cb9-9e8d-164871239f4e).
CVSS VectorVendor: 0b655efc-079c-4cb9-9e8d-164871239f4e
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:M/U:Red
Lifecycle Timeline
2DescriptionCVE.org
A critical bypass access control vulnerability has been reported in PTC Windchill Risk and Reliability (WRR) Enterprise Edition.
AnalysisAI
Authentication bypass in PTC Windchill Risk and Reliability (WRR) Enterprise Edition allows remote attackers to reach critical functionality without valid credentials, per CVSS 4.0 AV:N/PR:N metrics. The flaw stems from missing authentication (CWE-306) and carries a critical 9.3 score with high confidentiality, integrity, and availability impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to a PTC Windchill Risk and Reliability Enterprise Edition instance; the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates no authentication, no special privileges, and no user interaction are needed against an exposed deployment. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals align toward a genuine high priority rather than an inflated CVSS: the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) indicates network-reachable, low-complexity, unauthenticated exploitation with high impact across confidentiality, integrity, and availability, which is fully consistent with a CWE-306 authentication bypass. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who can reach the WRR application over the network sends requests directly to a critical function endpoint that fails to enforce authentication, gaining access to sensitive reliability data or the ability to alter records without any credentials. Because the CVSS vector indicates no privileges and no user interaction are required, this can be performed by a remote, unauthenticated actor. … |
| Remediation | Consult the PTC vendor advisory at https://www.ptc.com/en/support/article/CS474818 and apply the vendor-provided update for Windchill Risk and Reliability Enterprise Edition; a specific patched version was not included in the available data and must be confirmed from that advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: identify and inventory all PTC Windchill Risk and Reliability Enterprise Edition instances and immediately restrict network access to these systems via firewall rules, allowing only trusted IP ranges and VPN connections. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today