apex one vulnerabilities and fixes

Recent CVEs affecting apex one, with upgrade or downgrade steps. 16 tracked.

Also searched as: apexone.

apex one has 16 tracked vulnerabilities, 2 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 12. Most recent: 2026-05-21. Highest priority: CVE-2026-34926 (score 73/100).

• CVE-2026-34926 MEDIUM 6.7 EXPLOITED UPGRADE Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
• CVE-2025-71210 CRITICAL 9.8 UPGRADE A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicio
• CVE-2025-71211 CRITICAL 9.8 UPGRADE A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicio
• CVE-2025-71212 HIGH 7.8 UPGRADE A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalat
• CVE-2025-71214 HIGH 7.8 MITIGATE An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a l
• CVE-2025-71213 HIGH 7.8 UPGRADE An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate priv
• CVE-2025-71216 HIGH 7.8 MITIGATE A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow
• CVE-2025-71217 HIGH 7.8 MITIGATE An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism cou
• CVE-2026-45208 HIGH 7.8 UPGRADE A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate p
• CVE-2026-34927 HIGH 7.8 UPGRADE An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileg
• CVE-2026-34929 HIGH 7.8 UPGRADE An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileg
• CVE-2025-71215 HIGH 7.0 MITIGATE A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature veri
• CVE-2026-34928 HIGH 7.8 UPGRADE An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileg
• CVE-2026-34930 HIGH 7.8 UPGRADE An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileg
• CVE-2026-45206 HIGH 7.8 UPGRADE An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileg
• CVE-2026-45207 HIGH 7.8 UPGRADE An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileg

FAQ

How do I fix apex one vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is apex one being exploited right now?

Yes: 1 apex one CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which apex one CVE should I patch first?

CVE-2026-34926 currently ranks highest (73/100): Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability.

RSS feed for apex one · ← Back to latest CVEs