ZeroDay Findings
Sign inSign up

Findings

CVE-2026-34926

Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

Published May 21, 2026 · updated Jul 23, 2026 · Trend Micro Apex One

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administrative credentials to the server via some other method to exploit this vulnerability.

Timeline

Detection, updates, and resolution for this record.

  1. May 21, 2026 · Catalog

    Detected

    A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administra

  2. May 21, 2026 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  3. Jun 4, 2026 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  4. Jul 23, 2026 · Catalog

    Updated

    A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administra

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date Jun 4, 2026

Affected

  • cpe trendmicro/apex oneversion unspecified
  • vendor Trend Micro Apex Oneversion unspecified

Sources

  • CISA KEVCVE-2026-34926

    Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.

    cisa.gov
  • CVE.orgCVE-2026-34926

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-34926

    30-day exploitation probability 0.5%

    first.org
  • NIST NVDCVE-2026-34926

    A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only exploitable on the on-p

    nvd.nist.gov

References