ZDI-CAN-28122
HIGH 7.2
Overdue
Oct 03, 2025
Trend Micro
Trend Micro is a well-established cybersecurity software vendor known for antivirus, endpoint protection, and cloud security solutions. This high-severity vulnerability (CVSS 7.2) can be exploited remotely by authenticated attackers with high-level privileges, requiring no user interaction, and could result in complete compromise of confidentiality, integrity, and availability. Security teams should monitor for patches from Trend Micro by the January 31, 2026 deadline and prioritize updates for systems where high-privileged accounts may be at risk.
Advisory Details
Researcher
Discovered by:
Xavier DANEST - Decathlon
Reported
October 03, 2025
Deadline
January 31, 2026
75d overdue
CVSS Vector
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H