Trend Micro Apex One vulnerabilities

180 known vulnerabilities, 11 confirmed exploited in the wild (CISA KEV), 32 published in the last 12 months.

Exploited Trend Micro Apex One vulnerabilities

CVE-2026-34926 — Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
CVE-2025-54948 — Trend Micro Apex One OS Command Injection Vulnerability
CVE-2023-41179 — Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
CVE-2022-40139 — Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
CVE-2022-26871 — Trend Micro Apex Central Arbitrary File Upload Vulnerability
CVE-2021-36742 — Trend Micro Multiple Products Improper Input Validation Vulnerability
CVE-2021-36741 — Trend Micro Multiple Products Improper Input Validation Vulnerability
CVE-2020-8599 — Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
CVE-2020-8468 — Trend Micro Multiple Products Content Validation Escape Vulnerability
CVE-2020-8467 — Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
CVE-2020-24557 — Trend Micro Multiple Products Improper Access Control Vulnerability

CVE-2026-45208 — (CVSS 7.8)
CVE-2026-45207 — (CVSS 7.8)
CVE-2026-45206 — (CVSS 7.8)
CVE-2026-34930 — (CVSS 7.8)
CVE-2026-34929 — (CVSS 7.8)
CVE-2026-34928 — (CVSS 7.8)
CVE-2026-34927 — (CVSS 7.8)
CVE-2026-34926 — Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability (CVSS 6.7) — exploited
CVE-2025-71217 — (CVSS 7.8)
CVE-2025-71216 — (CVSS 7.8)
CVE-2025-71215 — (CVSS 7.0)
CVE-2025-71214 — (CVSS 7.8)
CVE-2025-71213 — (CVSS 7.8)
CVE-2025-71212 — (CVSS 7.8)
CVE-2025-71211 — (CVSS 9.8)
CVE-2025-71210 — (CVSS 9.8)
CVE-2025-54987 — (CVSS 9.8)
CVE-2025-54948 — Trend Micro Apex One OS Command Injection Vulnerability (CVSS 9.8) — exploited
CVE-2025-49158 — (CVSS 7.8)
CVE-2025-49157 — (CVSS 7.8)
CVE-2025-49156 — (CVSS 7.8)
CVE-2025-49155 — (CVSS 8.8)
CVE-2025-49154 — (CVSS 7.8)
CVE-2024-58105 — (CVSS 7.8)
CVE-2024-58104 — (CVSS 7.8)