https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:06:16 +0000 https://cve.radiocsirt.org/vuln/2026-0521-tm-a1-001 <p>TrendAI has released updates to Apex One (on-premise), Apex One as a Service and Vision One - Standard Endpoint Protection (SEP) to resolve multiple vulnerabilities. ! ITW Notification: TrendAI has observed at least one instance of an attempt to actively exploit one of these vulnerabilities in the wild.</p> <p>TrendAI has released updates to Apex One (on-premise), Apex One as a Service and Vision One - Standard Endpoint Protection (SEP) to resolve multiple vulnerabilities. ! ITW Notification: TrendAI has observed at least one instance of an attempt to actively exploit one of these vulnerabilities in the wild.</p> https://cve.radiocsirt.org/vuln/2026-0521-tm-a1-001 https://cve.radiocsirt.org/vuln/bdu:2026-07430 bdu:2026-07430 https://cve.radiocsirt.org/vuln/bdu:2026-07430 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0642 certfr-2026-avi-0642 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0642 https://cve.radiocsirt.org/vuln/euvd-2026-319939 EUVD-2026-319939 https://cve.radiocsirt.org/vuln/euvd-2026-319939 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45208 <p>A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.</p> <p>Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.</p> <p>A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.</p> <p>Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-45208 https://cve.radiocsirt.org/vuln/ghsa-92rr-32pc-38g6 <p>A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.</p> <p>Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.</p> <p>A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.</p> <p>Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-92rr-32pc-38g6 https://cve.radiocsirt.org/vuln/jvndb-2026-016802 <p>Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises contain multiple vulnerabilities listed below.&lt;ul&gt;&lt;li&gt;Relative path traversal in Apex One server (CWE-23) - CVE-2026-34926&lt;ul&gt;&lt;li&gt;The only product that could be vulnerable to this exploit is TrendAI Apex One (On Premise).&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;Origin validation error in Security Agent (CWE-346) - CVE-2026-34927,CVE-2026-34928,CVE-2026-34929,CVE-2026-34930,CVE-2026-45206,CVE-2026-45207&lt;/li&gt;&lt;li&gt;Time-of-check time-of-use (TOCTOU) race condition in Security Agent (CWE-367) - CVE-2026-45208&lt;/li&gt;&lt;/ul&gt;Trend Micro Incorporated has reported that attacks exploiting CVE-2026-34926 have been observed in the wild. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.</p> <p>Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises contain multiple vulnerabilities listed below.&lt;ul&gt;&lt;li&gt;Relative path traversal in Apex One server (CWE-23) - CVE-2026-34926&lt;ul&gt;&lt;li&gt;The only product that could be vulnerable to this exploit is TrendAI Apex One (On Premise).&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;Origin validation error in Security Agent (CWE-346) - CVE-2026-34927,CVE-2026-34928,CVE-2026-34929,CVE-2026-34930,CVE-2026-45206,CVE-2026-45207&lt;/li&gt;&lt;li&gt;Time-of-check time-of-use (TOCTOU) race condition in Security Agent (CWE-367) - CVE-2026-45208&lt;/li&gt;&lt;/ul&gt;Trend Micro Incorporated has reported that attacks exploiting CVE-2026-34926 have been observed in the wild. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-016802 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1643 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Trend Micro Apex One ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Trend Micro Apex One ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1643