Trend Micro Patches Critical Code Execution Flaw in Apex Central

Trend Micro has issued patches for three vulnerabilities affecting its Apex Central product, after Tenable published PoC code and technical details. The flaws include CVE-2025-69258, a critical LoadLibraryEX issue that could let an unauthenticated, remote attacker load a malicious DLL and execute code with System privileges, and two high-severity flaws, CVE-2025-69259 and CVE-2025-69260, that can be exploited to cause a DoS condition.

The bugs affect the on-premises version of Apex Central, and are fixed with Critical Patch build 7190, according to Trend Micro’s advisory. Tenable’s technical details and PoC exploit code have increased exposure, and the SecurityWeek article notes that CISA’s Known Exploited Vulnerabilities (KEV) catalog includes 10 CVEs linked to Trend Micro Apex products.

While authentication is not required for the flaws, the attacker must first gain access to the victim’s network, and the piece also reference­s past targeting of Apex Central by attackers, with attribution occasionally linked to Chinese threat actors. Written by Eduard Kovacs, the piece appears in SecurityWeek on 9 January 2026.