Title: TrendAI Apex One de  de Trend Micro, Description: Una vulnerabilidad en la consola de gestión de Trend Micro Apex One podría permitir a un atacante remoto cargar código malicioso y ejecutar comandos en las instalaciones afectadas.

Tenga en cuenta: aunque esta vulnerabilidad tiene una calificación CVSS técnica crítica, esto fue reportado a través de una divulgación responsable por un investigador a través de la Iniciativa Día Cero (Zero Day Initiative). Las versiones SaaS del producto ya han sido mitigadas y no se requiere ninguna acción por parte del cliente.

Para esta vulnerabilidad en particular, un atacante debe tener acceso a la consola de gestión de Trend Micro Apex One, por lo que los clientes que tienen la dirección IP de su consola expuesta externamente deberían considerar factores de mitigación como restricciones de origen si aún no se han aplicado.

{"timestamp":"2026-05-21T14:10:09.359975Z","id":"CVE-2025-71210","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Trend Micro, Inc.","product":"TrendAI Apex One","cpes":["cpe:2.3:a:trendmicro:apexone_op:14.0.0.14136:*:*:*:*:*:*:*"],"versions":[{"version":"2019 (14.0)","lessThan":"14.0.0.14136","versionType":"semver","status":"affected"}]},{"vendor":"Trend Micro, Inc.","product":"TrendAI Apex One as a Service","cpes":["cpe:2.3:a:trendmicro:apexone_saas:14.0.0.20315:*:*:*:*:*:*:*"],"versions":[{"version":"SaaS","lessThan":"14.0.20315","versionType":"semver","status":"affected"}]}]

OR
          *cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:* versions up to (excluding) 14.0.20315
          *cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:* versions up to (excluding) 14.0.0.14136

Trend Micro, Inc.: https://success.trendmicro.com/en-US/solution/KA-0022458 Types: Vendor Advisory

Trend Micro, Inc.: https://www.zerodayinitiative.com/advisories/ZDI-26-136/ Types: Third Party Advisory

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations.

Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required.

For this particular vulnerability, an attacker must have access to the Trend Micro Apex One Management Console, so customers that have their console�s IP address exposed externally should consider mitigating factors such as source restrictions if not already applied.

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-22

https://success.trendmicro.com/en-US/solution/KA-0022458

https://www.zerodayinitiative.com/advisories/ZDI-26-136/