ZDI-26-137 CRITICAL 9.8 Published Mar 03, 2026

Trend Micro Apex One Console Directory Traversal Remote Code Execution Vulnerability

Trend

Trend Micro Apex One contains a critical remote code execution vulnerability (CVE-2025-71211) that allows unauthenticated attackers to execute arbitrary code on affected systems with a CVSS score of 9.8. An attacker can exploit this flaw without needing any credentials, giving them complete control over vulnerable installations. Security teams should immediately patch Trend Micro Apex One installations and prioritize this as a critical threat given the ease of exploitation and severity of impact.

Related CVE

CVE-2025-71211

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy