ZDI-26-136
CRITICAL 9.8
Published
Mar 03, 2026
Trend Micro Apex One Console Directory Traversal Remote Code Execution Vulnerability
Trend
Trend Micro Apex One contains a critical remote code execution vulnerability (CVE-2025-71210) that requires no authentication to exploit, allowing attackers to execute arbitrary code on vulnerable systems. This represents a severe threat as any unauthenticated remote user can compromise affected installations. Security teams should immediately prioritize patching Trend Micro Apex One systems and consider isolating or closely monitoring them until updates are available.