CVE-2026-34926: medium-severity vulnerability in TrendAI Apex One
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
A flaw in Apex One on-premise server allows someone with admin access to manipulate files outside intended directories, potentially injecting malicious code that gets sent to connected agents.
Directory traversal vulnerability (CWE-23) in Apex One on-premise server permits pre-authenticated local attackers with administrative credentials to modify critical configuration tables, enabling injection of malicious payloads distributed to managed endpoints. Exploitation requires prior compromise of administrative credentials and local or authenticated network access to the server.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.