PT-2026-1936 · Trend Micro · Trend Micro Apex Central

Publicado 2026-01-08 · Atualizado 2026-01-14 · CVE-2025-69258

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central versions prior to 7190

Description A LoadLibraryEX vulnerability exists in Trend Micro Apex Central that could allow an unauthenticated remote attacker to load a malicious Dynamic Link Library (DLL) into a key executable, specifically MsgReceiver.exe. Successful exploitation leads to the execution of attacker-supplied code with SYSTEM-level privileges on affected installations. A Proof of Concept (PoC) exploit has been released, increasing the risk of exploitation. The vulnerability is accessible via the TCP port 20001. The vulnerability is rated as critical with a CVSS score of 9.8.

Recommendations Upgrade Trend Micro Apex Central to build 7190 or later. Restrict exposure of the management console services to trusted network zones. Review logs for suspicious admin activity and web requests. Rotate credentials or tokens if exposure is suspected.

Exploit

Correção

RCE

DoS

Origin Validation Error

Buffer Overflow

Authentication Bypass by Spoofing

Enumeração de Fraquezas

CWE-346

CWE-120

CWE-290

Identificadores relacionados

CVE-2025-69258

Produtos afetados

Trend Micro Apex Central

Referências · 60

• 🔥 https://tenable.com/security/research/tra-2026-01 · Exploit
• https://twitter.com/ox0ffff/status/2010278392361316491 · Publicação no Twitter
• https://twitter.com/ritzsec/status/2010039842965778453 · Publicação no Twitter
• https://twitter.com/vuldb/status/2009278212178944395 · Publicação no Twitter
• https://twitter.com/ThreatSynop/status/2009586889439727973 · Publicação no Twitter
• https://twitter.com/threatcluster/status/2009732046290145499 · Publicação no Twitter
• https://twitter.com/ActiveITSolutns/status/2010711515255439850 · Publicação no Twitter
• https://twitter.com/cyashadotcom/status/2010704414361969033 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2009252810181968167 · Publicação no Twitter
• https://reddit.com/r/CVEWatch/comments/1qbvv1k/top_10_trending_cves_13012026 · Publicação no Reddit
• https://twitter.com/TheCyberSecHub/status/2009232167717773668 · Publicação no Twitter
• https://success.trendmicro.com/en-US/solution/KA-0022071 · Aviso do Fabricante
• https://reddit.com/r/SecOpsDaily/comments/1q85evd/trend_micro_apex_central_rce_flaw_scores_98_cvss · Publicação no Reddit
• https://twitter.com/AMLMidlandsLtd/status/2010024159460393015 · Publicação no Twitter
• https://t.me/thehackernews/8182 · Publicação no Telegram