ZDI-26-136 CRITICAL 9.8 Published Mar 03, 2026

Trend Micro Apex One Console Directory Traversal Remote Code Execution Vulnerability

Trend

Trend Micro Apex One contains a critical remote code execution vulnerability (CVE-2025-71210) that requires no authentication to exploit, allowing attackers to execute arbitrary code on vulnerable systems. This represents a severe threat as any unauthenticated remote user can compromise affected installations. Security teams should immediately prioritize patching Trend Micro Apex One systems and consider isolating or closely monitoring them until updates are available.

Related CVE

CVE-2025-71210

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy