CVE-2026-34928Disclosure(trendmicro / apex_one)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-346

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • apex_one

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
apex_one

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-01: 106-01
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos Trend Micro ❗ CVE-2026-34929 ❗ CVE-2026-34928 ❗ CVE-2026-34927 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-trend-micro-3/ https://t.co/mNpqKEoxGw

    Post summary

    A brief tweet lists three CVE identifiers related to Trend Micro products and directs readers to a CERT.gov.py page for additional information.

    00010137
    6.7K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Apptrendmicroapex_one-windows-
Apptrendmicroapex_one-windows-

Explore more