ZDI-CAN-27975: ZDI-26-269: TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability

Published Apr 15, 2026

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-54948.

Affected Software

1 affected component

Trend Micro Apex One

Event History

Apr 15, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-27975?

ZDI-CAN-27975 has a critical severity rating due to its potential for remote code execution without authentication.

How do I fix ZDI-CAN-27975?

To fix ZDI-CAN-27975, update your Trend Micro Apex One installation to the latest version provided by Trend Micro.

Who is affected by ZDI-CAN-27975?

ZDI-CAN-27975 affects all installations of Trend Micro Apex One that have not been patched against this vulnerability.

Can ZDI-CAN-27975 be exploited remotely?

Yes, ZDI-CAN-27975 can be exploited remotely, allowing attackers to execute arbitrary code without needing authentication.

What type of vulnerability is ZDI-CAN-27975?

ZDI-CAN-27975 is classified as a directory traversal vulnerability that leads to remote code execution.