https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:28:36.219072+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05903 bdu:2022-05903 2026-10-03T10:28:36.347329+00:00 bdu:2022-05903 https://cve.radiocsirt.org/vuln/certfr-2022-avi-817 certfr-2022-avi-817 — De multiples vulnérabilités ont été découvertes dans Trend Micro Apex One. Certaines d'entre elles permettent à un atta… 2026-10-03T10:28:36.347372+00:00 certfr-2022-avi-817 https://cve.radiocsirt.org/vuln/euvd-2026-255817 EUVD-2026-255817 2026-10-03T10:28:36.347393+00:00 EUVD-2026-255817 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40139 fkie_cve-2022-40139 2026-10-03T10:28:36.347406+00:00

Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex One server administrator to instruct affected clients to download an unverified rollback package, which could lead to remote code execution. Please note: an attacker must first obtain Apex One server administration console access in order to exploit this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-6h63-j29f-rv95 GHSA-6h63-j29f-rv95 2026-10-03T10:28:36.347439+00:00

Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex One server administrator to instruct affected clients to download an unverified rollback package, which could lead to remote code execution. Please note: an attacker must first obtain Apex One server administration console access in order to exploit this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2022-40139 gsd-2022-40139 2026-10-03T10:28:36.347457+00:00 gsd-2022-40139 https://cve.radiocsirt.org/vuln/jvndb-2022-000071 jvndb-2022-000071 2026-10-03T10:28:36.347468+00:00

Trend Micro Apex One and Trend Micro Apex One as a Service provided by Trend Micro Incorporated contain multiple vulnerabilities listed below. * Improper validation in some components of the rollback mechanism (CWE-20) - CVE-2022-40139 * Improper access control (CWE-284) - CVE-2022-40140 * Information exposure (CWE-200) - CVE-2022-40141 * Improper link resolution before file access (CWE-59) - CVE-2022-40142 * Improper link resolution before file access (CWE-59) - CVE-2022-40143 * Improper authentication (CWE-287) - CVE-2022-40144 Trend Micro Incorporated states that attacks exploiting CVE-2022-40139 have been observed. CVE-2022-40139, CVE-2022-40140, CVE-2022-40141, CVE-2022-40142, CVE-2022-40143 Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. CVE-2022-40144 Akinori Takeuchi of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.