CVE-2025-49219: Trend Micro Apex Central GetReportDetailView Deserialization of Untrusted Data Remote Code Execution Vulnerability
An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex Central. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the GetReportDetailView method. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49219?
The severity of CVE-2025-49219 is critical due to its potential to enable pre-authentication remote code execution.
How do I fix CVE-2025-49219?
To fix CVE-2025-49219, update Trend Micro Apex Central to version 8.0.7007 or later.
What products are affected by CVE-2025-49219?
CVE-2025-49219 affects Trend Micro Apex Central versions below 8.0.7007.
Can CVE-2025-49219 be exploited remotely?
Yes, CVE-2025-49219 can be exploited remotely without authentication.
Is CVE-2025-49219 related to any other vulnerabilities?
CVE-2025-49219 is related to CVE-2025-49220, as both involve insecure deserialization in different methods.