CVE-2022-40139—Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

漏洞名称

Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

描述

Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://success.trendmicro.com/dcx/s/solution/000291528?language=en_US
• https://nvd.nist.gov/vuln/detail/CVE-2022-40139

相关新闻文章

• Trend Micro warns of Apex One zero-day exploited in the wildMay 22, 2026
• Trend Micro warns of critical Apex One code execution flawsFebruary 26, 2026
• Trend Micro warns of Apex One zero-day exploited in attacksAugust 6, 2025

相关 CWE

• CWE-353
• CWE-641