📦 Apex Central

by Trendmicro

🔍 What is Apex Central?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-69258

CRITICAL CVSS 9.8 Jan 8, 2026

An unauthenticated remote attacker can exploit a LoadLibraryEX vulnerability in Trend Micro Apex Central to load malicious DLLs, leading to arbitrary code execution with SYSTEM privileges. This affect...

CVE-2022-26871

CRITICAL CVSS 9.8 Mar 29, 2022

CVE-2022-26871 is a critical arbitrary file upload vulnerability in Trend Micro Apex Central that allows unauthenticated remote attackers to upload malicious files to the server. This can lead to remo...

CVE-2025-69259

HIGH CVSS 7.5 Jan 8, 2026

A NULL pointer dereference vulnerability in Trend Micro Apex Central allows remote attackers to cause denial-of-service without authentication. This affects organizations using vulnerable versions of ...

CVE-2025-69260

HIGH CVSS 7.5 Jan 8, 2026

An out-of-bounds read vulnerability in Trend Micro Apex Central allows remote attackers to cause denial-of-service conditions without authentication. This affects organizations using vulnerable versio...

CVE-2025-30680

HIGH CVSS 7.1 Jun 17, 2025

A Server-Side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) allows attackers to manipulate parameters to access internal systems and disclose sensitive information. Only SaaS...

CVE-2023-52325

HIGH CVSS 7.5 Jan 23, 2024

A local file inclusion vulnerability in Trend Micro Apex Central widgets could allow remote attackers to execute arbitrary code on affected systems. This vulnerability requires both valid credentials ...

CVE-2023-52331

HIGH CVSS 7.1 Jan 23, 2024

A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central allows an authenticated attacker to make requests to internal or local services from the server. This ...

CVE-2023-32529

HIGH CVSS 8.8 Jun 26, 2023

This vulnerability allows authenticated users in Trend Micro Apex Central to perform SQL injection attacks that could lead to remote code execution. Organizations using vulnerable versions of Trend Mi...

CVE-2025-30679

MEDIUM CVSS 6.5 Jun 17, 2025

A Server-Side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central's modOSCE component allows attackers to manipulate parameters to access internal systems and disclose sensitive informati...