55
60
60
30
42
60
55
60
60
Trend Micro fixed a remote code execution in Apex Central
60
30
55
55
60
30
30
30
55
30
55
60
55
35
60
30
60
42
55
ZDI-26-577: Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI disclosed a local privilege escalation (CVE-2026-67212, CVSS 7.0) in Trend Micro VPN's OpenSSL configuration, requiring prior low-privileged code execution.
The Zero Day Initiative published advisory ZDI-26-577 describing an uncontrolled search path element vulnerability in Trend Micro VPN's OpenSSL configuration. Local attackers who can already execute low-privileged code on an affected installation can escalate privileges. ZDI rated the issue 7.0 on CVSS and assigned CVE-2026-67212.
25
30
35
60
30
Trend Micro Releases Urgent Fix for Actively Exploited Critical Security Vulnerability
60
60
55
30
60
60
42