The Cl0p ransomware group is actively exploiting CVE-2026-12569, a critical remote code execution (RCE) vulnerability (CVSS 9.8) in PTC Windchill and FlexPLM product lifecycle management software. The vulnerability was disclosed on June 17, 2026, and evidence suggests it was exploited in early July. Organizations using these PTC products should apply patches immediately to prevent ransomware attacks.