CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-03-29
Trend Micro Apex Central Arbitrary File Upload and Remote Code Execution (RCE) Vulnerability (CVE-2022-26871) Analysis and Mitigation Guide
[Affected Scope] Trend Micro Apex Central On-Premise deployments (SaaS deployments are unaffected)
[Impact] Unauthenticated remote attackers can upload malicious web shells to execute arbitrary commands with system privileges, leading to complete infrastructure compromise
[Mitigation] Immediately apply the official hotfixes/patches provided by Trend Micro and restrict external access to the management console