ZDI 2026-03-03

ZDI-26-147: Trend Micro Apex Central Improper Authentication Privilege Escalation Vulnerability

CVE-2025-71208

Machine-generated analysis · WAYSCloud LLM

The vulnerability requires authentication before privilege escalation can occur in Trend Micro Apex Central.

Context

Trend Micro Apex Central is affected by an improper authentication vulnerability that could allow privilege escalation. The issue is remotely exploitable, but only after an attacker has obtained valid credentials. The ZDI assigned a CVSS score of 8.1, indicating high severity based on exploitability and impact metrics. Worth noting that the vulnerability is not exposed to unauthenticated remote attackers.

Operator considerations

Check: Verify if Trend Micro Apex Central is deployed and identify current version levels.

From Zero Day Initiative ↗

This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2025-71208.

Read the full advisory on ZDI →