PT-2026-21991 · Trend Micro · Trend Micro Apex One

Published 2026-02-25 · Updated 2026-03-04 · CVE-2025-71210

Positive Technologies · (AI Summary)

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One (affected versions not specified)

Description The Trend Micro Apex One management console contains a path traversal weakness. This allows attackers with access to the console to execute malicious code on unpatched Windows deployments. The issue is a directory traversal that can lead to remote code execution. The flaw affects global and enterprise endpoint security systems.

Recommendations Update to Critical Patch Build 14136. Restrict console exposure and IP access.

Related Identifiers

CVE-2025-71210

ZDI-26-136

Affected Products

Trend Micro Apex One

References · 14

• https://zerodayinitiative.com/advisories/ZDI-26-136 · Security Note
• https://twitter.com/ThreatSynop/status/2026968722175390182 · Twitter Post
• https://twitter.com/catnap707/status/2027161010956902442 · Twitter Post
• https://t.me/true_secator/7948 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1rgzu4k/top_10_trending_cves_28022026 · Reddit Post
• https://twitter.com/ThreatSynop/status/2027154067886383574 · Twitter Post
• https://twitter.com/vuldb/status/2029046319885762708 · Twitter Post
• https://twitter.com/TheZDIBugs/status/2028945704320921780 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rg3r7c/top_10_trending_cves_27022026 · Reddit Post
• https://twitter.com/ThreatSynop/status/2027092231887208804 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rhuktk/top_10_trending_cves_01032026 · Reddit Post
• https://twitter.com/catnap707/status/2027160936449270128 · Twitter Post
• https://twitter.com/CCBalert/status/2029195353690423781 · Twitter Post
• https://twitter.com/autumn_good_35/status/2026676902161953231 · Twitter Post