Vulnerabilities

CVSS

9.4 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

Risk score

100.0

Known exploited

CISA KEV

Published

2025-08-05

Status

Published

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

Weaknesses

CWE-78

Coverage 1

vulnerability

Trend Micro warns of Apex One zero-day exploited in the wild

Japanese cybersecurity software company Trend Micro has addressed an Apex One zero-day vulnerability exploited in attacks targeting Windows systems.

BleepingComputer · May 22, 2026 Critical

CVE-2026-34926CVE-2025-54948CVE-2022-40139

All articles mentioning it

Advisories and references

• success.trendmicro.com/en-US/solution/KA-0020652
• cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-...