Live › vulnerability › CVE-2020-8599
Go to dashboardTrend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE that lets a remote, unauthenticated attacker write arbitrary data to arbitrary paths and bypass ROOT login. Attackers can take over the security server and the endpoints it manages.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 0h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Trend Micro Apex One and OfficeScan | vendor | – | – |
Check the installed Apex One or OfficeScan server version against Trend Micro's advisory; the sources do not give a file or setting to inspect.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.
This page as .md · .json · in your agent: get_signal("CVE-2020-8599")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.