CVE-2022-26871
Trend Micro Apex Central Arbitrary File Upload Vulnerability
Published Mar 29, 2022 · updated Jun 16, 2026 · trendmicro apex central
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
Timeline
Detection, updates, and resolution for this record.
Mar 29, 2022 · Catalog
Detected
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
Mar 31, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 21, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
Required action
Apply updates per vendor instructions.
CISA due date Apr 21, 2022
Affected
- cpe trendmicro/apex central2019
- cpe trendmicro/apex oneversion unspecified
- vendor Trend Micro Apex Centralversion unspecified
Sources
- CISA KEVCVE-2022-26871
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution.
cisa.gov - CVE.orgCVE-2022-26871
Official CVE identifier
cve.org - FIRST EPSSCVE-2022-26871
30-day exploitation probability 19.5%
first.org - NIST NVDCVE-2022-26871
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
nvd.nist.gov