CVE-2025-69259

PoC —

CVSS 3.1

7.5 high

EPSS

2%p74

Published

Jan 8, 2026 (Jan 8, 2026)

Modified

Jun 17, 2026

Description

A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability..

Vendors: trendmicro
Products: apex central
Weakness: CWE-120, CWE-346, CWE-476
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news3 stories

Trend Micro fixed a remote code execution in Apex Central

Security AffairsJan 9, 18:33 UTC · Jan 9, 2026Vulnerability in the wildCVE-2025-69258 CVE-2025-69259 CVE-2025-69260+2 CVEs

Trend Micro Apex Central RCE Flaw Scores 9.8 CVSS in On

The Hacker NewsJan 9, 10:01 UTC · Jan 9, 2026Vulnerability CVE-2025-69258 CVE-2025-69259 CVE-2025-69260

PoC released for unauthenticated RCE in Trend Micro Apex Central (CVE-2025-69258)

Help Net SecurityJan 8, 00:00 UTC · Jan 8, 2026Exploit / PoC CVE-2025-69258 CVE-2025-69259 CVE-2025-69260