Origin Validation Vulnerability in Apex One/SEP Agent by Trend Micro
CVE-2026-45206

7.8HIGH

Key Information:

Vendor: Trend Micro
Status: Trendai Apex One; Trendai Apex One As A Service
Vendor: CVE Published:; 21 May 2026

🔔 Create Trend Micro Vulnerability Alert

What is CVE-2026-45206?

An origin validation vulnerability present in the Apex One/SEP agent may allow local attackers to escalate privileges on installations that have been compromised. To successfully exploit this vulnerability, an attacker must first execute low-privileged code on the target system. This vulnerability is related to a different process protection communication mechanism, differing from similar identified vulnerabilities.

Affected Version(s)

TrendAI Apex One 2019 (14.0) < 14.0.0.17079

TrendAI Apex One as a Service SaaS < 14.0.20731

References

https://success.trendmicro.com/en-US/solution/KA-0023430

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 21, 2026
Vulnerability Reserved
May 11, 2026

CVE-2026-45206 Data

JSON