PTC's remediation strategy
eMudhra has publicly disclosed a compromise of eight intermediate CA certificates (CVE-2026-111943 and CVE-2026-111944). This could allow bad actors with the private key of any of the compromised CAs to impersonate any website or service.
PTC has assessed the potential impact of these vulnerabilities across our products and environments. The following programs are impacted:
- Creo+
- Creo Parametric 10.0 to 13.4
- Windchill Workgroup Manager 13.1.0.0 through 2027.0.0.0
- CEF (Chromium Embedded Framework) prior 156.0.8078.80
Please check the eMudhra article if you think your browser is affected.
Organizations using these products should assess their environments for exposure and follow the recommended remediation steps immediately.
Please refer to this Technical Support Article for remediation steps by product.