Actively exploited vulnerabilities affecting Trend Micro products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-34926https://wildfortech.com/security#CVE-2026-34926This vulnerability in Trend Micro Apex One (on-premise) allows a local attacker who has not yet authenticated to exploit a directory traversal flaw, enabling them to tamper with a key server-side table and inject malicious code. That code can then be pushed out to all managed agents across the deployment. The result is a potential full compromise of every endpoint Apex One manages, making this a high-impact threat in enterprise environments relying on centralized endpoint protection.Thu, 21 May 2026 00:00:00 GMTTrend MicroApex Onehttps://wildfortech.com/security#CVE-2025-54948https://wildfortech.com/security#CVE-2025-54948This vulnerability in Trend Micro Apex One's on-premise management console allows a remote attacker to inject and execute OS commands without needing to log in first. Pre-authentication exploitation is particularly serious because it requires no credentials or user interaction — an attacker with network access to the console can potentially take full control of the system, making this a high-priority risk for any organization running the affected software.Mon, 18 Aug 2025 00:00:00 GMTTrend MicroApex One