An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
| Vendor | Product | Versions |
|---|---|---|
| trend micro | trendai apex one | 2019 (14.0), SaaS |
Updated severity from HIGH to CRITICAL and clarified that no exploit is available.
Initial creation