ZDI-26-146
MEDIUM 4.4
Published
Mar 03, 2026
Trend Micro Apex Central Manual Update Server-Side Request Forgery Vulnerability
Trend
Trend Micro Apex Central contains an information disclosure vulnerability (CVE-2025-71207) that allows authenticated remote attackers to access sensitive data on affected installations, rated as medium severity with a CVSS score of 4.4. Since authentication is required, the risk is limited to users with legitimate access to the system. Organizations running Trend Micro Apex Central should apply vendor patches promptly and review access controls to limit exposure to trusted administrators only.