PT-2026-21992 · Trend Micro · Trend Micro Apex One Console

Published

2026-02-25

·

Updated

2026-06-04

·

CVE-2025-71211

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One Console (affected versions not specified)
Description The Trend Micro Apex One Console is susceptible to a directory traversal issue that could lead to remote code execution. The issue allows an attacker to potentially gain control of the system. The estimated impact affects a large number of devices worldwide. The vulnerability involves directory traversal, enabling unauthorized access to system files. The affected component is the Apex One Console.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-71211
ZDI-26-137

Affected Products

Trend Micro Apex One Console