CVE-2025-47867

—

CVSS 3.1

9.8 critical

EPSS

2%p77

Published

Jun 17, 2025 (Jun 17, 2025)

Modified

Jun 17, 2026

Description

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations.

Vendors: trendmicro
Products: apex central
Weakness: CWE-74
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.