CVE-2026-45206
Undergoing Analysis Undergoing Analysis - In Progress
Privilege Escalation in Apex One/SEP Agent

Publication date: 2026-05-21

Last updated on: 2026-05-21

Assigner: Trend Micro, Inc.

Description
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-21
Last Modified
2026-05-21
Generated
2026-05-21
AI Q&A
2026-05-21
EPSS Evaluated
N/A
NVD
CVE-2026-45206
EUVD
EUVD-2026-31278
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
trendmicro apex_one *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-346 The product does not properly verify that the source of data or communication is valid.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is an origin validation flaw in the Apex One/SEP agent that could allow a local attacker to escalate their privileges on affected systems. It requires the attacker to already have the ability to execute low-privileged code on the target system. The issue is related to a process protection communication mechanism and is similar to another vulnerability identified as CVE-2026-45207.


How can this vulnerability impact me? :

If exploited, this vulnerability could allow an attacker with limited access to escalate their privileges, potentially gaining higher-level control over the affected system. This could lead to unauthorized access, modification, or disruption of system operations.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart