Description
A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trend Micro | Trend Micro Apex Central | 8.0 – < 8.0.6955 | 8.0.6955 |
Advisories 2
- NCSC-2025-0175 Kwetsbaarheden verholpen in Trend Micro Apex Central NCSC-NL (Netherlands) · May 23, 2025
- WID-SEC-2025-1121 Trend Micro Apex Central: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · May 21, 2025