ZDI 2026-03-03

ZDI-26-145: Trend Micro Apex Central Scheduled Update Server-Side Request Forgery Vulnerability

CVE-2025-71206

Machine-generated analysis · WAYSCloud LLM

The vulnerability requires authentication and could allow remote information disclosure via server-side request forgery.

Context

Trend Micro Apex Central's Scheduled Update Server is affected by a server-side request forgery (SSRF) vulnerability. The advisory states that authenticated remote attackers can exploit this issue to disclose sensitive information. The CVSS score is rated at 4.4, indicating a medium severity impact. Worth noting that the vulnerability is limited to authenticated attack scenarios.

Operator considerations

Check: Verify if Trend Micro Apex Central is deployed with the Scheduled Update Server component enabled.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.4. The following CVEs are assigned: CVE-2025-71206.

Read the full advisory on ZDI →