PT-2026-42472 · Trend Micro+1 · Apex One+1

L4Ys

+1

·

Published

2026-05-21

·

Updated

2026-05-22

·

CVE-2026-45208

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apex One/SEP agent (affected versions not specified)
Description A time-of-check time-of-use (TOCTOU) issue exists in the agent, which occurs when a program checks a condition (such as a file's existence or permissions) and then uses the result of that check, but the condition changes between the check and the use. This could allow a local attacker who already has the ability to execute low-privileged code on the target system to escalate privileges.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Time Of Check To Time Of Use

Weakness Enumeration

Related Identifiers

CVE-2026-45208

Affected Products

Apex One
Sep Agent