CVE-2025-49216

9.8 criticalEPSS 0.5%

Critical (9.8) in trendmicro trend micro endpoint encryption. EPSS 0.5% chance of exploitation in the next 30 days.

An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-477
Published: 2025-06-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:trend_micro_endpoint_encryption

References

https://success.trendmicro.com/en-US/solution/KA-0019928
https://www.zerodayinitiative.com/advisories/ZDI-25-373/

Check your stack JSON