CVE-2022-26871: Trend Micro Apex Central Arbitrary File Upload Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-31. EPSS: 19.5% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

Affected products

• Trend Micro Apex Central: version 2019 only
• Trend Micro Apex One: affected versions not specified

Published 2022-03-29. Last modified 2026-06-17.