Description
An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trend Micro | Trend Micro Apex Central | 8.0 – < 8.0.7007 | 8.0.7007 |
Advisories 2
- NCSC-2025-0194 Kwetsbaarheden verholpen in Trend Micro Apex One en Apex Central NCSC-NL (Netherlands) · Jun 12, 2025
- WID-SEC-2025-1292 Trend Micro Apex Central: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Jun 10, 2025