Directory Traversal Flaw in Apex One by Trend Micro

CVE-2026-34926

What is CVE-2026-34926?

Apex One, a security solution from Trend Micro, exhibits a directory traversal vulnerability that could potentially allow a pre-authenticated local attacker to manipulate a critical server-side database table. By leveraging access to the Apex One Server and possessing administrative credentials, an attacker may be able to inject malicious code that can compromise the integrity and functionality of the software. This flaw underscores the necessity for robust access control and continuous monitoring of server environments to mitigate risks associated with unauthorized access.

References