Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

Summary

Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.

Remediation

1. Inventory every Trend Micro Apex One deployment, including staging.
2. Upgrade Trend Micro Apex One to the fixed version for your release line, listed under Affected versions.
3. Confirm the running version after the upgrade.
4. Review logs from before the change for signs of exploitation.

References

• Advisoryhttps://success.trendmicro.com/en-US/solution/KA-0023430
• Advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2026-34926
• Referencehttps://success.trendmicro.com/ja-JP/solution/KA-0022974
• Referencehttps://jvn.jp/en/vu/JVNVU90583059/
• Referencehttps://www.jpcert.or.jp/english/at/2026/at260014.html
• Referencehttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34926