Descripción
Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.
Acción recomendada
Aplicar las actualizaciones según las instrucciones del fabricante.
Referencias
- , https://success.trendmicro.com/dcx/s/solution/000287820?language=en_US success.trendmicro.com/dcx/s/solution/000287819
- Ficha en NVD (NIST) nvd.nist.gov/vuln/detail/CVE-2021-36741
Otras vulnerabilidades de Trend Micro en el catálogo
- CVE-2026-34926 Vulnerabilidad de recorrido de directorios (path traversal) en Trend Micro Apex One (On-Premise) Alta 21-05-2026
- CVE-2025-54948 Vulnerabilidad de inyección de comandos del sistema operativo en Trend Micro Apex One Alta 18-08-2025
- CVE-2023-41179 Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Alta 21-09-2023
- CVE-2022-40139 Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability Alta 15-09-2022
- CVE-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability Alta 31-03-2022