Trend Micro
In 7 briefs, most recently 16 July 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
12 Trend Micro vulnerabilities are on CISA's list of vulnerabilities exploited in the wild. Most recent:
- CVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
- CVE-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability
- CVE-2023-41179 Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
- CVE-2022-40139 Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
- CVE-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability
- CVE-2021-36742 Trend Micro Multiple Products Improper Input Validation Vulnerability
- CVE-2021-36741 Trend Micro Multiple Products Improper Input Validation Vulnerability
- CVE-2020-8599 Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
Coverage in DanSec Daily
- Dutch and Spanish police bust major fraud rings; Firefox, Zoom, SharePoint and LegacyHive Windows zero-day flaws. Plus OkoBot and AsyncAPI npm supply chain …
- Cloud Atlas and Ghostwriter espionage, Megalodon GitHub commit campaign, and First VPN takedown, plus actively exploited LiteSpeed cPanel and Drupal flaws.
- Kimwolf botmaster arrested, GitHub breach via malicious VS Code extension, and Grafana repo theft via TanStack supply chain attack.
- ManoMano breach hits 38M customers, Cisco SD-WAN zero-day CVE-2026-20127 exploited for three years, and US sanctions on exploit broker Operation Zero.
- IDHS exposing ~700,000 residents' health data, a VMware ESXi zero-day exploited via SonicWall VPN, and Trend Micro Apex Central RCE patches.
- Google Salesforce data breach by ShinyHunters, DaVita ransomware notice to over 1 million people, and WhatsApp removing 6.8 million scam-centre accounts.
- Paragon Graphite spyware hit journalists' iPhones, EchoLeak exposed Microsoft 365 Copilot, and 80,000 Entra ID accounts faced password spraying.