CVE-2026-77646 : 상세 정보

CVE-2026-77646

2026-08-20
22h18 +00:00
Server-Side Request Forgery - SSRF
A08-Soft and Data Integrity FailA10-Server-Side Req. Forgery (SSRF)
2026-10-26
10h10 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-502 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
CWE-918 Server-Side Request Forgery
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

참고 자료