CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-26871
Critical (9.8) in Trend Micro Apex Central. In CISA KEV since 2022-03-31. EPSS 19% chance of exploitation in the next 30 days.
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
Severity
- EPSS
- 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2022-03-31, due 2022-04-21
- CWE
- CWE-345
- Published
- Modified
- Record from
- the NVD, synced
Affected
- trendmicro:apex_central
- trendmicro:apex_one