ZDI-CAN-28148 CRITICAL 9.9 Overdue Sep 17, 2025

Trend Micro

Trend Micro, a major cybersecurity software vendor, has a critical vulnerability (CVSS 9.9) that can be exploited remotely by authenticated users without user interaction to compromise confidentiality, integrity, and availability across multiple systems. The attack requires network access and valid credentials but no special conditions, making it highly dangerous in enterprise environments where multiple users have legitimate access. Security teams should immediately prioritize patching once available and monitor for any exploitation attempts targeting Trend Micro products in their infrastructure.

Advisory Details
Researcher Discovered by: Hugo LECLERCQ
Reported September 17, 2025
Deadline January 15, 2026 91d overdue
CVSS Vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy