---
id: "CVE-2022-26871"
kind: "vulnerability"
aliases: ["CVE-2022-26871"]
title: "Trend Micro Apex Central: Trend Micro Apex Central Arbitrary File Upload Vulnerability"
severity: "critical"
cvss: 9.8
epss: 0.19481
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Trend Micro Apex Central", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["apex-central", "exploited", "on-premises", "trend-micro", "vendor"]
not_affected_if: ["managed-hosting", "not-running-apex-central"]
published_at: "2022-03-29T21:15:07+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26871", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-26871", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-26871", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Trend Micro Apex Central: Trend Micro Apex Central Arbitrary File Upload Vulnerability

Trend Micro Apex Central, the central management console for Trend Micro endpoint products, has an arbitrary file upload flaw. An attacker who can reach it can upload a file that leads to remote code execution on the server.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Trend Micro Apex Central affected ? fixed ?

## How to check

Identify Apex Central servers in your environment and confirm the installed build against Trend Micro's advisory; sources do not give a command or file path.

## Fix

Apply the Trend Micro Apex Central updates per the vendor instructions (CISA required action); the fixed build is not named in the sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-26871
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2022-26871
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2022-26871

## From the sources

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_