Critical severity · published Mar 29, 2022
CVE-2022-26871
Trend Micro Apex Central Arbitrary File Upload Vulnerability
In wildKEV
9.8
CVSS
19.5%
EPSS
Yes
On KEV
Description
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)19.5% · higher than 97% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 31, 2022
Federal remediation dueApr 21, 2022
Ransomware campaign useNot known
Affected products
Which versions
AO
Apex One · Trend Micro
All versions, or not specified · source: NVD
TM
Trend Micro Apex Central · Trend Micro
2019 (on-premise), SaaS · source: vendor
AC
Apex Central · Trendmicro
2019 · source: NVD, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-26871
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-26871
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
https://success.trendmicro.com/solution/000290678
x_refsource_MISC
https://success.trendmicro.com/jp/solution/000290660
x_refsource_MISC
https://www.jpcert.or.jp/english/at/2022/at220008.html
x_refsource_MISC
https://jvn.jp/vu/JVNVU99107357
x_refsource_MISC
https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435
More from Apex One
9.8
CVE-2025-54948
Trend Micro Apex One OS Command Injection Vulnerability
9.8
CVE-2020-8599
Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
8.8
CVE-2021-36741
Trend Micro Multiple Products Improper Input Validation Vulnerability
8.8
CVE-2020-8468
Trend Micro Multiple Products Content Validation Escape Vulnerability
8.8
CVE-2020-8467
Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability