Live › vulnerability › CVE-2021-36741
Go to dashboardTrend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 have an input validation flaw that lets an attacker upload arbitrary files to the server. The attacker must first be able to log in to the product's management console, and CISA lists this as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 0h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security | vendor | – | – |
Unknown from the sources.
Apply the Trend Micro patch for CVE-2021-36741 for your product; the sources do not name the fixed build number.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability.
This page as .md · .json · in your agent: get_signal("CVE-2021-36741")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.