Most severe vulnerabilities for vendor "trendai"

TrendAI TrendAI Vision One Security AgentTrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

Risk 46

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-34927.

First published (updated )

Advisory

ZDI-26-320

TrendAI Vision One Security AgentZDI-26-325: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

Risk 49

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-45207.

First published (updated )

ZDI-CAN-29177

TrendAI Vision OneTrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability

Risk 56

This vulnerability allows remote attackers to escalate privileges on affected installations of TrendAI Vision One. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2025-71387.

First published (updated )

Advisory

ZDI-26-498

TrendAI Vision OneZDI-26-498: TrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability

Risk 58

This vulnerability allows remote attackers to escalate privileges on affected installations of TrendAI Vision One. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2025-71387.

First published (updated )

ZDI-CAN-28122

TrendAI Vision One Service GatewayZDI-26-497: TrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability

Risk 50

This vulnerability allows remote attackers to disclose sensitive information on affected installations of TrendAI Vision One. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.7. The following CVEs are assigned: CVE-2025-71386.

First published (updated )

ZDI-CAN-28148

TrendAI Vision One Service GatewayTrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability

Risk 44

This vulnerability allows remote attackers to disclose sensitive information on affected installations of TrendAI Vision One. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.7. The following CVEs are assigned: CVE-2025-71386.

First published (updated )

Advisory

ZDI-26-497

TrendAI Apex One Security AgentTrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability

Risk 46

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71414.

First published (updated )

Advisory

ZDI-26-654

TrendAI Apex One Security AgentZDI-26-654: TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability

Risk 46

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71414.

First published (updated )

ZDI-CAN-27868

TrendAI Apex One Security AgentZDI-26-653: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

Risk 46

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71415.

First published (updated )

ZDI-CAN-27896

TrendAI Apex One Security AgentTrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

Risk 46

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71415.

First published (updated )

Advisory

ZDI-26-653

TrendAI Apex One Security AgentTrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

Risk 46

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71416.

First published (updated )

Advisory

ZDI-26-652

TrendAI Apex One Security AgentZDI-26-652: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

Risk 46

This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71416.

First published (updated )

ZDI-CAN-27921

Trending

Vendor Risk Score

Software

TrendAI TrendAI Vision One Security AgentTrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

TrendAI Vision One Security AgentZDI-26-325: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

TrendAI Vision OneTrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability

TrendAI Vision OneZDI-26-498: TrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability

TrendAI Vision One Service GatewayZDI-26-497: TrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability

TrendAI Vision One Service GatewayTrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability

TrendAI Apex One Security AgentTrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability

TrendAI Apex One Security AgentZDI-26-654: TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability

TrendAI Apex One Security AgentZDI-26-653: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

TrendAI Apex One Security AgentTrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

TrendAI Apex One Security AgentTrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

TrendAI Apex One Security AgentZDI-26-652: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

Company

Resources

Contact