Apex Central
Vendor:
First CVE: Mar 3, 2021 · Active for 5 years
35
Total CVEs
More Total CVEs than 97% of tracked products
5.8
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
7.1
Avg CVSS
Higher Avg CVSS than 45% of tracked products
2.9%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Apex Central over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 3, 2021
5 years ago
Most Recent CVE
Jan 8, 2026
201 days ago
CVE Severity & Scoring
Apex Central35 CVEs
51%
31%
17%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (2.9%)
Network34 (97.1%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low34 (97.1%)
High1 (2.9%)
Unknown0 (0.0%)
User Interaction
None22 (62.9%)
Unknown0 (0.0%)
Required13 (37.1%)
Privileges Required
Low15 (42.9%)
High0 (0.0%)
None20 (57.1%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (35 CVEs).
35 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-26871CRITICAL An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execut | Mar 29, 2022 | 9.8 | 78 | YES | NO |
CVE-2025-69258CRITICAL A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execut | Jan 8, 2026 | 9.8 | 38 | NO | NO |
CVE-2025-49219CRITICAL An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note t | Jun 17, 2025 | 9.8 | 31 | NO | NO |
CVE-2025-49220CRITICAL An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note th | Jun 17, 2025 | 9.8 | 30 | NO | NO |
CVE-2023-32530HIGH Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code | Jun 26, 2023 | 8.8 | 28 | NO | NO |
CVE-2025-69260HIGH A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations.
Please no | Jan 8, 2026 | 7.5 | 27 | NO | NO |
CVE-2025-69259HIGH A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations.
| Jan 8, 2026 | 7.5 | 27 | NO | NO |
CVE-2023-32529HIGH Vulnerable modules of Trend Micro Apex Central (on-premise) contain vulnerabilities which would allow authenticated users to perform a SQL injection that could lead to remote code | Jun 26, 2023 | 8.8 | 27 | NO | NO |
CVE-2025-47867CRITICAL A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and l | Jun 17, 2025 | 9.8 | 26 | NO | NO |
CVE-2025-47865CRITICAL A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations. | Jun 17, 2025 | 9.8 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (35 CVEs).
CISA KEV
1 CVE
2.9% of CVEs· 98th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (35 CVEs).
Media Mentions
Signals from CVEs in this product scope (35 CVEs).
Top CNAs Publishing CVEs For Apex Central
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2019 | 34 | 8.3 | 1.5% | 1 | 0 |