Multiple vulnerabilities were identified in Trend Micro Apex One. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, remote code execution and data manipulation on the targeted system.
CVE-2026-34926 is being exploited in the wild. A pre-authenticated local attacker could modify a key table on the server to inject malicious code to deploy to agents on affected installations. Hence, the risk level is rated as High Risk.
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
