Public Exploit Released: Critical Trend Micro Flaw Grants SYSTEM Access

Trend Micro has issued a critical security alert for Apex Central (on‑premise) patching a remote code execution flaw, tracked as CVE-2025-69258, with a CVSS score of 9.8. According to the bulletin, successful exploitation could allow an unauthenticated attacker to load a malicious DLL into a key executable and run attacker-supplied code under the context of SYSTEM on affected installations.

The patch, Trend Micro says, is Critical Patch Build 7190, which also addresses two high‑severity Denial of Service vulnerabilities, CVE-2025-69259 and CVE-2025-69260, both running on Windows and both requiring no authentication to exploit. Tenable disclosed the flaws and published technical details and a proof‑of‑concept exploit for them, with the disclosures attributed to Tenable according to the article.

The vulnerabilities affect Apex Central versions below Build 7190 on Windows, and Trend Micro cautions that exploitation may require several specific conditions to be met, urging customers to update to the latest builds as soon as possible. Found this helpful?