Trend Micro Apex One & Vision One Multiple Vulnerabilities Alert

Alert Regarding Multiple Vulnerabilities in Trend Micro Products Vulnerability Overview Release Date: May 21, 2026 Affected Products: TrendAI Apex One (On Premise), Trend Micro Apex One as a Service, TrendAI Vision One Endpoint Security - Standard Endpoint Protection. Vulnerability Details: Arbitrary File Distribution/Privilege Escalation: If exploited, an authenticated attacker could tamper with arbitrary files on the server, thereby distributing malicious code to security agents or escalating privileges. Relative Path Traversal Vulnerability (CVE-2026-34926): Trend Micro reports that a relative path traversal vulnerability in TrendAI Apex One (On Premise) has been observed in the wild. Recommendation: Users should update affected systems to the latest version as soon as possible. Scope of Impact Affected products include: TrendAI Apex One (On Premise) Trend Micro Apex One as a Service TrendAI Vision One Endpoint Security - Standard Endpoint Protection Note: According to Trend Micro, only TrendAI Apex One (On Premise) may be susceptible to exploitation via the relative path traversal vulnerability (CVE-2026-34926). Remediation Apply appropriate patches based on the information provided by Trend Micro. Trend Micro has released the following patches to address these vulnerabilities: TrendAI Apex One (On Premise) Apply the patch to both the server and security agents. Trend Micro Apex One as a Service and TrendAI Vision One Endpoint Security - Standard Endpoint Protection Apply the patch to security agents. As these products are cloud services, server-side vulnerabilities were resolved during maintenance in April 2026. References Trend Micro Official Security Advisory: ITV SECURITY BULLETIN: Apex One and Vision One – Standard Endpoint Protection (SEP) May 2026 Security Bulletin Japan Vulnerability Notes (JVN)**: JVN#I9583099

Goal Reached Thanks to every supporter — we hit 100%!

Trend Micro Apex One & Vision One Multiple Vulnerabilities Alert