CVE-2025-31286: Trend Micro Trend Vision One

Critical severity, CVSS 9.0. EPSS: 0.5% chance of exploitation in the next 30 days.

An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute arbitrary code. Please note: this issue has already been addressed on the backend service and is no longer considered an active vulnerability.

Affected products

• Trend Micro Trend Vision One: affected versions not specified

Published 2025-04-02. Last modified 2026-06-17.