Trend Micro Addresses Critical Vulnerabilities in Apex Central

Trend Micro has addressed three critical vulnerabilities in its Apex Central management console, which could allow remote code execution (RCE) and denial-of-service (DoS) attacks. Discovered by Tenable in August 2025, these vulnerabilities are tracked as CVE-2025-69258, CVE-2025-69259, and CVE-2025-69260. The most severe, CVE-2025-69258, has a Common Vulnerability Scoring System (CVSS) score of 9.8, indicating a critical risk level.

Trend Micro fixed a remote code execution in Apex CentralTrend Micro closes critical vulnerabilities in Apex Central

The RCE vulnerability, CVE-2025-69258, allows unauthenticated remote attackers to load a malicious Dynamic Link Library (DLL) into a key executable, MsgReceiver.exe. This flaw enables attackers to execute arbitrary code with SYSTEM privileges, posing significant risks to the confidentiality, integrity, and availability of affected systems. The other two vulnerabilities, CVE-2025-69259 and CVE-2025-69260, both have a CVSS score of 7.5 and can lead to denial-of-service conditions through an unchecked NULL return value and an out-of-bounds read, respectively.

Trend Micro fixed a remote code execution in Apex CentralTrend Micro closes critical vulnerabilities in Apex Central

Trend Micro has released Critical Patch Build 7190 to address these vulnerabilities. Organizations using on-premise installations of Apex Central on Windows are urged to apply this patch immediately, as all versions below Build 7190 are vulnerable. The company emphasizes that while the vulnerabilities do not require authentication, attackers must have access to the vulnerable system, either physically or remotely. In addition to patching, Trend Micro recommends that organizations review their remote access policies and enhance perimeter security measures.

Trend Micro closes critical vulnerabilities in Apex CentralTrend Micro fixed a remote code execution in Apex Central

Trend Micro has stated, “Organizations should immediately patch to Build 7190,” highlighting the urgency of addressing these vulnerabilities. The company also noted that it has observed attempts to exploit similar vulnerabilities in the wild, underscoring the importance of timely updates.

Trend Micro closes critical vulnerabilities in Apex Central

While Trend Micro has taken steps to mitigate these vulnerabilities, some cybersecurity experts have raised concerns about the frequency and severity of vulnerabilities in widely used software. Critics argue that reliance on timely patching may not be sufficient to protect organizations from sophisticated attacks, emphasizing the need for more robust security measures and proactive threat detection.

Trend Micro closes critical vulnerabilities in Apex Central

Following the release of the patch, organizations are encouraged to monitor their systems for any signs of exploitation and to stay updated on future security advisories from Trend Micro. The company continues to emphasize the importance of maintaining up-to-date security controls to mitigate potential risks associated with vulnerabilities in its products.

Trend Micro closes critical vulnerabilities in Apex Central

• “A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to execution of attacker-supplied code under the context of SYSTEM on affected installations.” — Tenable Report

Trend Micro fixed a remote code execution in Apex Central

• “Organizations should immediately patch to Build 7190.” — Trend Micro Advisory

Trend Micro closes critical vulnerabilities in Apex Central

• “Trend Micro has observed as least one instance of an attempt to actively exploit one of these vulnerabilities in the wild.” — Trend Micro Advisory

Trend Micro fixed a remote code execution in Apex Central