Trend Micro security patch release for CVE-2025-71210
Security Patch Release
Summary
Hide ▲
Show ▼
Trend Micro released Critical Patch Build 14136 for Apex One, closing two critical vulnerabilities that could allow remote code execution on vulnerable Windows systems. The patched flaws, CVE-2025-71210 and CVE-2025-71211, are path traversal bugs in the management console. Trend Micro also said the build fixes two high-severity privilege escalation flaws in the Windows agent and four more in the macOS agent. The company urged customers to update to the latest builds and, where the console is exposed externally, apply source restrictions.
Related Happenings
Redis security patch release for CVE-2026-23479
Security Patch Release
H score24
First: 03.06.2026 16:47
Last: 03.06.2026 16:47
Sources 1
About this happening:
Redis released patched minor versions on May 5 to fix CVE-2026-23479, a use-after-free in blocking-client code that can lead to arbitrary OS command executio...
Redis security patch release for CVE-2026-23479
Security Patch ReleaseAbout this happening: Redis released patched minor versions on May 5 to fix CVE-2026-23479, a use-after-free in blocking-client code that can lead to arbitrary OS command executio...
TrendAI Trend Micro’s enterprise business security patch release for CVE-2026-34926
Security Patch Release
H score45
First: 22.05.2026 11:19
Last: 22.05.2026 11:19
Sources 1
About this happening:
TrendAI released Apex One security updates after confirming a zero-day had been exploited in the wild, leaving on-premises installations at risk until patched....
TrendAI Trend Micro’s enterprise business security patch release for CVE-2026-34926
Security Patch ReleaseAbout this happening: TrendAI released Apex One security updates after confirming a zero-day had been exploited in the wild, leaving on-premises installations at risk until patched....
Avada Builder 3.15.3 patch release (CVE-2026-4782, CVE-2026-4798)
Security Patch Release
H score21
First: 15.05.2026 18:56
Last: 15.05.2026 18:56
Sources 1
About this happening:
Avada Builder shipped version 3.15.3 as the full fix for CVE-2026-4782 and CVE-2026-4798, closing the plugin flaws that could expose files and database data. A pri...
Avada Builder 3.15.3 patch release (CVE-2026-4782, CVE-2026-4798)
Security Patch ReleaseAbout this happening: Avada Builder shipped version 3.15.3 as the full fix for CVE-2026-4782 and CVE-2026-4798, closing the plugin flaws that could expose files and database data. A pri...
Microsoft security patch release for CVE-2026-41089
Security Patch Release
H score43
First: 13.05.2026 00:46
Last: 13.05.2026 00:46
Sources 1
About this happening:
Microsoft and other major software vendors shipped a heavy May 2026 patch cycle, with fixes spanning Windows, iOS, Firefox, Oracle products, and Chrome...
Microsoft security patch release for CVE-2026-41089
Security Patch ReleaseAbout this happening: Microsoft and other major software vendors shipped a heavy May 2026 patch cycle, with fixes spanning Windows, iOS, Firefox, Oracle products, and Chrome...
Linux kernel Dirty Frag patch release (CVE-2026-43284, CVE-2026-43500)
Security Patch Release
H score32
First: 11.05.2026 17:30
Last: 11.05.2026 17:30
Sources 1
About this happening:
Major Linux distributions are rolling out fixes for Dirty Frag, the Linux kernel patch release that covers CVE-2026-43284 and CVE-2026-43500. The update matter...
Linux kernel Dirty Frag patch release (CVE-2026-43284, CVE-2026-43500)
Security Patch ReleaseAbout this happening: Major Linux distributions are rolling out fixes for Dirty Frag, the Linux kernel patch release that covers CVE-2026-43284 and CVE-2026-43500. The update matter...
Timeline
-
26.02.2026 19:58 2 articles · 4mo ago
Trend Micro warns about two critical Apex One RCE flaws
Initial DisclosureTrend Micro warned Apex One customers that two critical path traversal flaws in the Trend Micro Apex One management console, CVE-2025-71210 and CVE-2025-71211, can let attackers with console access execute malicious code on vulnerable Windows systems, and urged updating to the latest builds while restricting externally exposed console IPs.
Show sources
- Trend Micro warns of critical Apex One code execution flaws — www.bleepingcomputer.com — 26.02.2026 19:58
- Trend Micro warns of critical Apex One code execution flaws — www.bleepingcomputer.com — 26.02.2026 19:58