# Trendmicro Apex One


- [CVE-2022-26871](https://insights.sbomify.com/CVE-2022-26871/): Trend Micro Apex Central Arbitrary File Upload (critical 9.8, exploited in the wild)
- [CVE-2020-8599](https://insights.sbomify.com/CVE-2020-8599/): Trend Micro Apex One and OfficeScan Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2025-54948](https://insights.sbomify.com/CVE-2025-54948/): Trend Micro Apex One OS Command Injection (critical 9.4, exploited in the wild)
- [CVE-2021-36741](https://insights.sbomify.com/CVE-2021-36741/): Trend Micro Multiple Products Improper Input Validation (high 8.8, exploited in the wild)
- [CVE-2020-8467](https://insights.sbomify.com/CVE-2020-8467/): Trend Micro Apex One and OfficeScan Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2020-8468](https://insights.sbomify.com/CVE-2020-8468/): Trend Micro Multiple Products Content Validation Escape (high 8.8, exploited in the wild)
- [CVE-2021-36742](https://insights.sbomify.com/CVE-2021-36742/): Trend Micro Multiple Products Improper Input Validation (high 7.8, exploited in the wild)
- [CVE-2020-24557](https://insights.sbomify.com/CVE-2020-24557/): Trend Micro Multiple Products Improper Access Control (high 7.8, exploited in the wild)
- [CVE-2023-41179](https://insights.sbomify.com/CVE-2023-41179/): Trend Micro Apex One and Worry-Free Business Security Remote Code Execution (high 7.2, exploited in the wild)
- [CVE-2022-40139](https://insights.sbomify.com/CVE-2022-40139/): Trend Micro Apex One and Apex One as a Service Improper Validation (high 7.2, exploited in the wild)
- [CVE-2026-34926](https://insights.sbomify.com/CVE-2026-34926/): Trend Micro Apex One (On-Premise) Directory Traversal (medium 6.7, exploited in the wild)
- [CVE-2025-71210](https://insights.sbomify.com/CVE-2025-71210/): Path traversal in TrendAI Apex One (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/trendmicro/apex-one/