ZDI-26-145 MEDIUM 4.4 Published Mar 03, 2026

Trend Micro Apex Central Scheduled Update Server-Side Request Forgery Vulnerability

Trend

A medium-severity information disclosure vulnerability exists in Trend Micro Apex Central that allows authenticated remote attackers to access sensitive data on vulnerable systems. While the threat is limited to users with valid credentials, organizations running Apex Central should prioritize patching this flaw to prevent potential data exposure. Security teams should apply available updates from Trend Micro and review access controls for Apex Central to minimize the window of exposure.

Related CVE

CVE-2025-71206

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy