We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations.
Reserved 2025-05-12 | Published 2025-06-17 | Updated 2025-06-17 | Assigner trendmicroCWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component
success.trendmicro.com/en-US/solution/KA-0019355
www.zerodayinitiative.com/advisories/ZDI-25-297/
Support options
