In CISA KEV6.7 MediumCWE-23
CVE-2026-34926
Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
Trend MicroApex One
Status
- Exploited in the wild
- In CISA KEV since 21 May
- Vendor fix available
Federal deadlineThu 4 Jun, 23:59 UTC
Passed 142 days ago
CISA KEV · added 21 May
Exploit probabilityEPSSchecked 25 Oct
0.5%probability of exploitation in the next 30 days
Higher than 45% of scored CVEs
SeverityCVSS
6.7Medium
Description NVD
A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations. This vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administrative credentials to the server via some other method to exploit this vulnerability.
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Coverage 4 articles · 3 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 21 May · 20:12 UTC | CISA | CISA Flags Trend Micro Apex One Flaw (CVE‑2026‑34926) in KEV |
| Thu 21 May · 21:19 UTC | CISA | CISA Flags Trend Micro Apex One Flaw (CVE‑2026‑34926) in KEV |
| Fri 22 May · 08:21 UTC | SecurityWeek | Trend Micro patches zero day Apex One flaw CVE-2026-34926 |
| Fri 22 May · 10:32 UTC | Security Affairs | CISA Flags CVE-2025-34291 Langflow Flaw in KEV Update |
- CISA Flags CVE-2025-34291 Langflow Flaw in KEV UpdateSecurity Affairs · mentions it in passing
- Trend Micro patches zero day Apex One flaw CVE-2026-34926SecurityWeek
- CISA Flags Trend Micro Apex One Flaw (CVE‑2026‑34926) in KEVCISA · official notice
- CISA Flags Trend Micro Apex One Flaw (CVE‑2026‑34926) in KEVCISA · first in our coverage · official notice