2026年5月22日星期五

Trend Micro Apex One Multiple Vulnerabilities

Trend Micro Apex One Multiple Vulnerabilities

Release Date: 22 May 2026

RISK: High Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in Trend Micro Apex One. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, remote code execution and data manipulation on the targeted system.

 

Note:

CVE-2026-34926 is being exploited in the wild.  A pre-authenticated local attacker could modify a key table on the server to inject malicious code to deploy to agents on affected installations. Hence, the risk level is rated as High Risk.

 

Impact

  • Elevation of Privilege
  • Remote Code Execution
  • Data Manipulation

System / Technologies affected

  • Trend Micro Apex One - 2019 (On-prem)
  • Trend Micro Apex One - Server and Agent builds below 17079 
  • Trend Micro Apex One as a Service (SaaS)
  • TrendAI Vision One Endpoint Security - Standard Endpoint Protection (SEP) - Agent builds below 14.0.20731

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

Vulnerability Identifier

Source

Related Link

於

沒有留言:

發佈留言

訂閱： 發佈留言 (Atom)

釣魚警報 - 提防假冒反詐騙協調中心（ADCC）及多個知名品牌的釣魚網站 發佈日期: 2026年05月22日 類別: ...