ZeroDay Findings
Sign inSign up

Findings

CVE-2025-71414

ZDI-26-654: TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability

Published Sep 10, 2026

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71414.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 10, 2026 · Catalog

    Detected

    This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71414.

Sources

  • CVE.orgCVE-2025-71414

    Official CVE identifier

    cve.org
  • Zero Day InitiativeZDI-26-654

    This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71414.

    zerodayinitiative.com