ZDI-26-137
CRITICAL 9.8
Published
Mar 03, 2026
Trend Micro Apex One Console Directory Traversal Remote Code Execution Vulnerability
Trend
Trend Micro Apex One contains a critical remote code execution vulnerability (CVE-2025-71211) that allows unauthenticated attackers to execute arbitrary code on affected systems with a CVSS score of 9.8. An attacker can exploit this flaw without needing any credentials, giving them complete control over vulnerable installations. Security teams should immediately patch Trend Micro Apex One installations and prioritize this as a critical threat given the ease of exploitation and severity of impact.