CISA’s KEV catalog currentlyincludes10 other CVEs assigned to Apex flaws.In addition to CVE-2026-34926, the latest Apex One updates address several other vulnerabilities — all of them are high-severity issues that can be exploited for local privilege escalation.“Exploiting these type of vulnerabilities generally require that an attacker has access (physical or remote) to a vulnerable machine. In addition to timely application of patches and updated solutions, customers are also advised to review remote access to critical systems and ensure policies and perimeter security is up-to-date,” TrendAI said in its advisory.Related:Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AIRelated:Trend Micro Patches Critical Code Execution Flaw in Apex CentralRelated:Trend Micro Patches Critical Apex One Vulnerabilities

In addition to CVE-2026-34926, the latest Apex One updates address several other vulnerabilities — all of them are high-severity issues that can be exploited for local privilege escalation.“Exploiting these type of vulnerabilities generally require that an attacker has access (physical or remote) to a vulnerable machine. In addition to timely application of patches and updated solutions, customers are also advised to review remote access to critical systems and ensure policies and perimeter security is up-to-date,” TrendAI said in its advisory.Related:Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AIRelated:Trend Micro Patches Critical Code Execution Flaw in Apex CentralRelated:Trend Micro Patches Critical Apex One Vulnerabilities

“Exploiting these type of vulnerabilities generally require that an attacker has access (physical or remote) to a vulnerable machine. In addition to timely application of patches and updated solutions, customers are also advised to review remote access to critical systems and ensure policies and perimeter security is up-to-date,” TrendAI said in its advisory.Related:Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AIRelated:Trend Micro Patches Critical Code Execution Flaw in Apex CentralRelated:Trend Micro Patches Critical Apex One Vulnerabilities

Related:Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AIRelated:Trend Micro Patches Critical Code Execution Flaw in Apex CentralRelated:Trend Micro Patches Critical Apex One Vulnerabilities

Related:Trend Micro Patches Critical Code Execution Flaw in Apex CentralRelated:Trend Micro Patches Critical Apex One Vulnerabilities

Related:Trend Micro Patches Critical Apex One Vulnerabilities

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Joe Chen has become Chief Technology Officer at Trellix.

Source: SecurityWeek