CVE-2025-47867: trend micro, inc. trend micro apex central Injection
CVSS: 9.8v3.1CriticalAnalyzed
Published 17-06-2025Last modified 26-02-2026
Vulnerability summary
CVE-2025-47867 is a critical (CVSS 9.8) Injection vulnerability in trend micro, inc. trend micro apex central. EPSS estimates a 1.90% chance of exploitation in the next 30 days, higher than 79.3% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.1 (NVD)EPSS score
1.90%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 17-06-2025PublishedVulnerability first disclosed.
- 26-02-2026Last modifiedVulnerability information updated.
Description
A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations.
CVSS metrics
2 scores · 2 sources · 1 versionCritical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSources2 sources · 7.5–9.8
- CVE.orgCNA7.5HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
1.90%
Chance of exploitation in the next 30 days
Percentile
79%
Versus all other CVEs
30-day change
0.00 pp
From 1.90% on 19-09-2026
19-09-202619-10-2026
EPSS score1.90%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Trend micro, inc.1 product
- trend micro apex central≥ 8.0, < 8.0.6955
Trendmicro1 product
- apex_central2019 | 2019:build_3752 | 2019:build_5158 | 2019:build_6016 | 2019:build_6288 | 2019:build_6394 | 2019:build_6481 | 2019:build_6511 | 2019:build_6571 | 2019:build_6658 | 2019:build_6660 | 2019:build_6890
2 vendors · 2 products
References
2 links- success.trendmicro.com/en-US/solution/KA-0019355Vendor Advisory
- www.zerodayinitiative.com/advisories/ZDI-25-297/Third Party Advisory