Live › vulnerability › CVE-2022-26871
Go to dashboardTrend Micro Apex Central, the central management console for Trend Micro endpoint products, has an arbitrary file upload flaw. An attacker who can reach it can upload a file that leads to remote code execution on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Trend Micro Apex Central | vendor | – | – |
Identify Apex Central servers in your environment and confirm the installed build against Trend Micro's advisory; sources do not give a command or file path.
Apply the Trend Micro Apex Central updates per the vendor instructions (CISA required action); the fixed build is not named in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
This page as .md · .json · in your agent: get_signal("CVE-2022-26871")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.