Trend Micro: every exploited CVE on CISA KEV
All 12 Trend Micro bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
12
Trend Micro bugs on CISA’s exploited list
1 added in 2026.
0
are linked to ransomware
Every Trend Micro vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-05-21 | CVE-2026-34926 | Trend Micro Apex One | Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | 0.13 | 0.55 | Out of scope (local) | No |
| 2025-08-18 | CVE-2025-54948 | Trend Micro Apex One | Trend Micro Apex One OS Command Injection Vulnerability | 0.25 | 0.99 | None yet | No |
| 2023-09-21 | CVE-2023-41179 | Trend Micro Apex One and Worry-Free Business Security | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | 0.04 | 0.70 | None yet | No |
| 2022-09-15 | CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service | Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability | 0.03 | 0.52 | None yet | No |
| 2022-03-31 | CVE-2022-26871 | Trend Micro Apex Central | Trend Micro Apex Central Arbitrary File Upload Vulnerability | 0.19 | 0.55 | None yet | No |
| 2021-11-03 | CVE-2021-36742 | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security | Trend Micro Multiple Products Improper Input Validation Vulnerability | 0.01 | 0.51 | Out of scope (local) | No |
| 2021-11-03 | CVE-2021-36741 | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security | Trend Micro Multiple Products Improper Input Validation Vulnerability | 0.05 | 0.52 | None yet | No |
| 2021-11-03 | CVE-2020-8599 | Trend Micro Apex One and OfficeScan | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | 0.12 | 0.54 | None yet | No |
| 2021-11-03 | CVE-2020-8468 | Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents | Trend Micro Multiple Products Content Validation Escape Vulnerability | 0.06 | 0.52 | None yet | No |
| 2021-11-03 | CVE-2020-8467 | Trend Micro Apex One and OfficeScan | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | 0.11 | 0.54 | None yet | No |
| 2021-11-03 | CVE-2020-24557 | Trend Micro Apex One, OfficeScan, and Worry-Free Business Security | Trend Micro Multiple Products Improper Access Control Vulnerability | 0.03 | 0.98 | Out of scope (local) | No |
| 2021-11-03 | CVE-2019-18187 | Trend Micro OfficeScan | Trend Micro OfficeScan Directory Traversal Vulnerability | 0.25 | 0.56 | None yet | No |
Industry partners
