PT-2026-21991 · Trend Micro · Trend Micro Apex One

Published 2025-09-11 · Updated 2026-05-27 · CVE-2025-71210

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One (affected versions not specified)

Description The Trend Micro Apex One management console contains a path traversal weakness. This allows attackers with access to the console to execute malicious code on unpatched Windows deployments. The issue is a directory traversal that can lead to remote code execution. The flaw affects global and enterprise endpoint security systems.

Recommendations Update to Critical Patch Build 14136. Restrict console exposure and IP access.

Fix

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2026-07811

CVE-2025-71210

ZDI-26-136

Affected Products

Trend Micro Apex One

References · 22

• https://zerodayinitiative.com/advisories/ZDI-26-136 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71210 · Security Note
• https://bdu.fstec.ru/vul/2026-07811 · Security Note
• https://twitter.com/TechTranslators/status/2059608974400348220 · Twitter Post
• https://twitter.com/ThreatSynop/status/2026968722175390182 · Twitter Post
• https://t.me/CVEtracker/54509 · Telegram Post
• https://t.me/cveNotify/164605 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1rgzu4k/top_10_trending_cves_28022026 · Reddit Post
• https://twitter.com/vuldb/status/2029046319885762708 · Twitter Post
• https://twitter.com/catnap707/status/2027160936449270128 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rg3r7c/top_10_trending_cves_27022026 · Reddit Post
• https://t.me/CVEtracker/54510 · Telegram Post
• https://twitter.com/catnap707/status/2027161010956902442 · Twitter Post
• https://t.me/true_secator/7948 · Telegram Post
• https://twitter.com/CCBalert/status/2029195353690423781 · Twitter Post