CVE-2026-34926: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

Published May 21, 2026
·
Updated

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.

This vulnerability is only exploitable on the on-premise version of Apex One and a potential attacker must have access to the Apex One Server and already obtained administrative credentials to the server via some other method to exploit this vulnerability.

Other sources

Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents on affected installations.

CISA

Affected Software

4 affected components
Trend Micro Apex One (On-Premise)
Trend Micro Apex One
trendmicro Apex One Windows<14.0.0.17079
trendmicro Apex One Windows<14.0.20731

Event History

May 21, 2026
CVE Published
via CISA·12:00 AM
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
CVE Published
via MITRE·01:03 PM
Data Sourced
via MITRE·01:03 PM
DescriptionSeverity
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
May 22, 2026
News Published
via BleepingComputer·01:39 PM
News Published
via BleepingComputer·01:41 PM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-34926?

CVE-2026-34926 has a medium severity rating of 6.7.

2

How do I fix CVE-2026-34926?

To fix CVE-2026-34926, ensure that you are using the latest patched version of Trend Micro Apex One (on-premise) and follow the recommended security guidelines.

3

Who is affected by CVE-2026-34926?

CVE-2026-34926 affects users of the on-premise version of Trend Micro Apex One.

4

What is the potential impact of CVE-2026-34926?

If exploited, CVE-2026-34926 could allow a pre-authenticated local attacker to inject malicious code into the server.

5

Is CVE-2026-34926 exploitable remotely?

CVE-2026-34926 is not remotely exploitable; it requires a local attacker's presence to take advantage of the vulnerability.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203