CVE-2021-36741
Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security
Trend Micro Multiple Products Improper Input Validation Vulnerability
What it is
Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.
What to do
Apply updates per vendor instructions.
Vendor notices and references
- success.trendmicro.com/dcx/s/solution/000287819?language=en_US, https://success.trendmicro
- nvd.nist.gov/vuln/detail/CVE-2021-36741
Description and required action as published by CISA. Full record at NVD.
Other Trend Micro entries on the list
- Apex One Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability CVE-2026-34926 · May 21, 2026
- Apex One Trend Micro Apex One OS Command Injection Vulnerability CVE-2025-54948 · Aug 18, 2025
- Apex One and Worry-Free Business Security Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability CVE-2023-41179 · Sep 21, 2023
- Apex One and Apex One as a Service Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability CVE-2022-40139 · Sep 15, 2022
- Apex Central Trend Micro Apex Central Arbitrary File Upload Vulnerability CVE-2022-26871 · Mar 31, 2022
- Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability CVE-2021-36742 · Nov 3, 2021