ZDI-26-146 MEDIUM 4.4 Published Mar 03, 2026

Trend Micro Apex Central Manual Update Server-Side Request Forgery Vulnerability

Trend

Trend Micro Apex Central contains an information disclosure vulnerability (CVE-2025-71207) that allows authenticated remote attackers to access sensitive data on affected installations, rated as medium severity with a CVSS score of 4.4. Since authentication is required, the risk is limited to users with legitimate access to the system. Organizations running Trend Micro Apex Central should apply vendor patches promptly and review access controls to limit exposure to trusted administrators only.

Related CVE

CVE-2025-71207

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy