Skip to content
COOEY

FAIL › dossier

Apex One

PRODUCT

· dossier confidence 0%

Apex One is Trend Micro's endpoint security solution that suffered critical high-severity remote code execution and directory traversal vulnerabilities actively exploited in the wild, revealing severe gaps in secure component design and patch management processes.

Failure events
2
Zero-days
0
RCEs
1
On KEV
2
Critical
0
Worst shame
72
PROFILE
CategoryEndpoint SecurityWhat they doApex One is an endpoint security and management solution provided by Trend Micro.
SECURITY POSTURE

The security posture is critically compromised by high-severity remote code execution and directory traversal vulnerabilities that were actively exploited in the wild, indicating severe gaps in secure component design and patch management.

Notable failures
  • CVE-2025-54948: OS command injection allowing pre-authenticated remote code execution
  • CVE-2026-34926: Local directory traversal enabling malicious code injection into agents
Patterns: repeated high-severity remote code execution vulnerabilities; pre-authenticated attack vectors; local privilege escalation via directory traversal
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2025-08-18 CVE-2025-54948 high Trend Micro Apex One suffered OS command injection, allowing remote attackers to upload and execute malicious code pre-authenticatedly.
2026-05-21 CVE-2026-34926 high Trend Micro Apex One on-premise software allows local attackers to inject malicious code into agents via a directory traversal flaw.
DOSSIER SOURCES
Open questions: Trend Micro's broader patch management processes for Apex One · Apex One's current vulnerability disclosure timeline
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-03 03:55:39.179195+00:00