CVE-2026-34928
Undergoing Analysis Undergoing Analysis - In Progress
Privilege Escalation in Apex One Agent

Publication date: 2026-05-21

Last updated on: 2026-05-22

Assigner: Trend Micro, Inc.

Description
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-21
Last Modified
2026-05-22
Generated
2026-06-11
AI Q&A
2026-05-21
EPSS Evaluated
2026-06-10
NVD
CVE-2026-34928
EUVD
EUVD-2026-31286
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
trendmicro apex_one to 14.0.20731 (exc)
trendmicro apex_one to 14.0.0.17079 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-346 The product does not properly verify that the source of data or communication is valid.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Mitigation Strategies

To mitigate this vulnerability, ensure that you update your Apex One (on-premise) and Apex One as a Service installations, as well as Vision One - Standard Endpoint Protection (SEP), to the latest versions released by Trend Micro.

Since exploitation requires local code execution with low privileges, restricting untrusted local code execution and applying principle of least privilege can help reduce risk.

Executive Summary

This vulnerability is an origin validation flaw in the Apex One/SEP agent. It allows a local attacker, who already has the ability to run low-privileged code on the affected system, to escalate their privileges. The issue is related to a named pipe communication mechanism and is similar to another vulnerability identified as CVE-2026-34927.

Impact Analysis

If exploited, this vulnerability can allow an attacker with limited access to escalate their privileges on the affected system. This means the attacker could gain higher-level permissions, potentially leading to unauthorized access to sensitive data, system modifications, or further compromise of the system.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-34928. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart