Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3143 articles · 171645 vulns · 37/41 feeds (7d)
← Back to list
7.8
CVE-2025-71213PATCHED
trend micro · trendai apex one

CVE-2025-71213: An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on

Description

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected Products

VendorProductVersions
trend microtrendai apex one2019 (14.0), SaaS

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
trend microapex onecert_advisory90%

References

  • https://success.trendmicro.com/en-US/solution/KA-0022458
  • https://www.zerodayinitiative.com/advisories/ZDI-26-140/

Related News (1 articles)

Tier B
BSI Advisories44d ago
[UPDATE] [hoch] Trend Micro Apex One: Mehrere Schwachstellen
→ No new info (linked only)
CVSS 3.17.8 HIGH
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
14.0.0.1413614.0.20315
CWECWE-346
PublishedMay 21, 2026
Trending Score0
Source articles1
Independent1
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2025-71215
CVE-2025-71215: A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification c
HIGHCVE-2025-71212
CVE-2025-71212: A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileg
HIGHCVE-2026-34930
CVE-2026-34930: An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe
MEDIUMCVE-2026-34926EXPKEV
CVE-2026-34926: A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker t
CRITICALCVE-2025-71210
CVE-2025-71210: A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code an

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
May 21, 2026
Discovered by ZDM
May 21, 2026
Patch Available
May 21, 2026