🚨 Trend Micro patches critical Apex One console RCE bugs (CVE-2025-71210/71211) plus multiple local privesc flaws TrendAI (Trend Micro) fixed eight high/critical Apex One issues, including two critical directory-traversal RCE flaws in the on-prem management console (CVE-2025-71210, CVE-2025-71211) that could let remote attackers upload malicious code and execute commands, plus six high-severity local privilege-escalation bugs (CVE-2025-71212 to -71217). Organizations running on-prem Apex One should patch immediately—especially if the console is exposed or reachable from untrusted networks—while SaaS customers were already mitigated. 🎯 Target: Global/Organizations using Trend Micro Apex One (on-prem) #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://www.securityweek.com/trend-micro-patches-critical-apex-one-vulnerabilities/
Post summary
Trend Micro has released patches for critical Apex One console RCE and local privilege‑escalation bugs; organizations using on‑prem Apex One should apply the updates immediately.
