CVE-2026-34926
Trend Micro Apex One
Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
What it is
Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Trend Micro entries on the list
- Apex One Trend Micro Apex One OS Command Injection Vulnerability CVE-2025-54948 · Aug 18, 2025
- Apex One and Worry-Free Business Security Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability CVE-2023-41179 · Sep 21, 2023
- Apex One and Apex One as a Service Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability CVE-2022-40139 · Sep 15, 2022
- Apex Central Trend Micro Apex Central Arbitrary File Upload Vulnerability CVE-2022-26871 · Mar 31, 2022
- Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability CVE-2021-36742 · Nov 3, 2021
- Apex One, Apex One as a Service, and Worry-Free Business Security Trend Micro Multiple Products Improper Input Validation Vulnerability CVE-2021-36741 · Nov 3, 2021