CVE-2025-49155

8.8 highEPSS 0.9%

High (8.8) in trendmicro apex one. EPSS 0.9% chance of exploitation in the next 30 days.

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2025-06-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:apex_one

References

https://success.trendmicro.com/en-US/solution/KA-0019917
https://www.zerodayinitiative.com/advisories/ZDI-25-362/

Check your stack JSON