Trend Micro fixed a remote code execution in Apex Central

Trend Micro fixed three Apex Central flaws after Tenable disclosed details and PoC code, addressing CVE-2025-69258, CVE-2025-69259 and CVE-2025-69260 in Apex Central on‑premise management consoles.

The most severe, CVE-2025-69258, is a LoadLibraryEX remote code execution flaw that could allow an unauthenticated attacker to load an attacker‑controlled DLL into a key executable and run code as SYSTEM on affected installations, with the other two vulnerabilities being a Message Unchecked NULL Return Value Denial of Service and a Message Out‑of‑bounds Read Denial of Service.

These issues affect Apex Central versions below Build 7190 on Windows, and Trend Micro warns that exploitation typically requires access to a vulnerable system, urging customers to apply patches promptly, limit remote access and keep security controls up to date. The company released Critical Patch Build 7190 for Apex Central (on‑premise), which is now available, and the advisory notes the flaws were discovered in August 2025 and patched in this product release. According to Trend Micro, the vulnerabilities could enable remote code execution or denial of service for unauthenticated attackers.