Actively exploited in the wild
Trend Micro Apex Central Arbitrary File Upload Vulnerability
Trend Micro - Apex Central · Listed in the CISA KEV since 2022-03-31. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2022-26871
CriticalCVSS 9.8KEVSummary
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
Risk Assessment
An attacker can remotely execute arbitrary code on the server, leading to full system compromise. The vulnerability does not require authentication, making it easy to exploit.
Recommendation
Update Trend Micro Apex Central to the latest patched version. Restrict access to the management interface from untrusted networks.
Other vulnerabilities in Trend Micro Apex Central
See all- CVE-2025-69260High
A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability.
- CVE-2025-69259High
A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability.
- CVE-2025-69258Critical
A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.
Original NVD description (English source)
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.