CVE-2022-26871: Trend Micro Apex Central Arbitrary File Upload Vulnerability

EPSS trend

Probability

19.48%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

-0.15 pp

From 19.63% on 19-09-2026

19-09-202619-10-2026

EPSS score

19.48%

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 31-03-2022
Federal due date: 21-04-2022

CISA required action

Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2022-26871

Public exploits

0 found

No public exploits indexed.

References

6 links

success.trendmicro.com/solution/000290678X Refsource MISCMitigationPatchVendor Advisory
success.trendmicro.com/jp/solution/000290660X Refsource MISCMitigationPatchVendor Advisory
www.jpcert.or.jp/english/at/2022/at220008.htmlX Refsource MISCThird Party AdvisoryVDB Entry
jvn.jp/vu/JVNVU99107357X Refsource MISCThird Party AdvisoryVDB Entry
appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435X Refsource MISCVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26871Government ResourceUS Government Resource

Related vulnerabilities

CVE-2021-25252trend microtrend micro virus scan api (vsapi) engine+190.62%5y ago03-03-2021 15:43Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.CVE-2021-45441trend microtrend micro apex one+30.27%4y ago08-01-2022 15:51A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a specially crafted file to issue commands over a certain pipe and elevate to a higher level of privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.CVE-2025-54948trend micro, inc.trend micro apex one+1KEV23.92%1y ago05-08-2025 13:00A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.CVE-2025-54987trend micro, inc.trend micro apex one+119.69%1y ago05-08-2025 13:00A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.CVE-2025-71212trend micro, inc.trendai apex one+20.54%5mo ago21-05-2026 13:02A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.CVE-2025-71210trend micro, inc.trendai apex one+23.81%5mo ago21-05-2026 13:01A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via a researcher through the Zero Day Initiative. The SaaS versions of the product have already been mitigated and no customer action required. For this particular vulnerability, an attacker must have access to the Trend Micro Apex One Management Console, so customers that have their console�s IP address exposed externally should consider mitigating factors such as source restrictions if not already applied.

All vulnerabilities intrend micro apex central apex_central apex_one

CVE-2022-26871: Trend Micro Apex Central Arbitrary File Upload Vulnerability

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References