VulnSocial

CVE-2026-45206General(trendmicro / apex_one)

LOWCVSS 7.8 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for trendmicro apex_one systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

trendmicro CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-346

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • apex_one

Threat summary

  • Active exploitation appears in 1 classified signals
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-06-07); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
trendmicro
Products
apex_one

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-07: 1Mentions · 2026-06-22: 1Active Exploitation · 2026-06-22: 106-0706-22
Signal classification2 categories
General
150.0%
Active Exploitation
150.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-06-071
General1
2026-06-221
Active Exploitation1
Full discourse2 posts
  • connect24h@connect24h
    Active Exploitation

    該当エンドポイント利用ユーザは注意。JPCERT/CCが5/21にTrendAI Apex One等を警告、CVE-2026-34926〜34930、CVE-2026-45206〜45208の8件で、34926はオンプレ版で実悪用確認済み。サーバ改ざんから細工コードがエージェント配布に乗る筋が一番しんどい。情シスはCP18012/Agent 14.0.18012、SaaS系はAgent 14.0.20731到達と管理サーバログを見てほしい、緊急度タカシ。 #セキュリティ https://is.gd/nLR8aX

    Post summary

    The post alerts users that CVE‑2026‑34926 has been actively exploited in on‑premises environments and was reported by JPCERT/CC on 5/21, with no patches or PoC details provided.

    00000357
    3.7K followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-45206: Trend Micro Apex One and SEP Agent Origin Validation Flaw - What It Means for Your Business and How to Respond https://hubs.li/Q04kn_GT0

    Post summary

    The provided text is a title and link referencing CVE-2026-45206, noting an origin validation flaw in Trend Micro products, but offers no further details on exploitation, patches, or mitigation.

    0000035
    31 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Apptrendmicroapex_one-windows-
Apptrendmicroapex_one-windows-

Explore more

Back to dashboardtrendmicro CVEsapex_one vulnerabilities