CyberSec.Space Logo
Back to CVE Browser

CVE-2022-26871

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2022-03-29
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

Affected Platforms (CPE)

📦
Trendmicro

Apex Central

= 2019
📦
Trendmicro

Apex One

All versions

References & Advisories

🔗 https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435
🔗 https://jvn.jp/vu/JVNVU99107357
🔗 https://success.trendmicro.com/jp/solution/000290660
🔗 https://success.trendmicro.com/solution/000290678
🔗 https://www.jpcert.or.jp/english/at/2022/at220008.html
🔗 https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435
🔗 https://jvn.jp/vu/JVNVU99107357
🔗 https://success.trendmicro.com/jp/solution/000290660

Related Vulnerabilities

CVE-2026-606305.5

Vulnerability in Oracle APEX (component: Installation). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exp...

CVE-2026-601565.3

Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exploitab...

CVE-2026-476907.5

MeltanoHub is the source code for hub.meltano.com, the central place for Meltano plugins. Versions of the repo prior to commit 923...

CVE-2026-31824.3

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive informatio...