Securityweek Trend Micro Apex One Vulnerabilities Allow Remote Code Execution
Article Content
Browse articles
Trend Micro has patched two critical vulnerabilities in its Apex One endpoint security platform that could allow remote code execution on vulnerable Windows systems. IT managers are advised to apply the updates immediately, especially those with on-premises instances, as the flaws affect the management console. Users of the software-as-a-service variant are already protected against these vulnerabilities.
Ask AI about this cluster
Answers cite the sources they use
Updated 228d ago How this analysis works
Timeline
2022-09-15
CVE-2022-40139 added to CISA KEV (active exploitation)
2023-09-19
CVE-2023-41179 published
2025-08-05
CVE-2025-54987 published
2025-08-05
CVE-2025-54948 published
2026-02-25
Trend Micro announces critical vulnerabilities in Apex One
2026-02-26
Trend Micro releases patches for Apex One vulnerabilities
More articles in this cluster (14)
Following this threat?
Track Trend Micro and CVE-2022-40139 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…