Securityweek Trend Micro Apex One Vulnerabilities Allow Remote Code Execution
Article Content
Browse articles
Trend Micro has patched two critical vulnerabilities in its Apex One endpoint security platform that could allow remote code execution on vulnerable Windows systems. IT managers are advised to apply the updates immediately, especially those with on-premises instances, as the flaws affect the management console. Users of the software-as-a-service variant are already protected against these vulnerabilities.
Ask AI about this cluster
Answers cite the sources they use
Updated 230d ago How this analysis works
Timeline
2022-09-15
CVE-2022-40139 added to CISA KEV (active exploitation)
2023-09-19
CVE-2023-41179 published
2025-08-05
CVE-2025-54987 published
2025-08-05
CVE-2025-54948 published
2026-02-25
Trend Micro announces critical vulnerabilities in Apex One
2026-02-26
Trend Micro releases patches for Apex One vulnerabilities
More articles in this cluster (14)
Following this threat?
Track Trend Micro and CVE-2022-40139 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
China-Linked Hackers Exploit PHP2Shell to Root 25 Servers Cybersecurity firm Dream reported that a China-linked threat actor exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and a Linux kernel privilege escalation flaw (CVE-2026-46300) to gain root access to 25 servers, including three in a U.S. government-affiliated environment. The attackers used…
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…