CVE-2025-47867

9.8 criticalEPSS 1.9%

Critical (9.8) in trendmicro apex central. EPSS 1.9% chance of exploitation in the next 30 days.

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2025-06-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:apex_central

References

https://success.trendmicro.com/en-US/solution/KA-0019355
https://www.zerodayinitiative.com/advisories/ZDI-25-297/

Check your stack JSON